Senior AppSec Engineer: Vulnerability Mastery

Bridge Technologies and Solutions; San Francisco (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

A leading tech firm in San Francisco is seeking an experienced professional to manage and enhance their Vulnerability Management Program. The ideal candidate will have 5-7 years of experience in application security, a thorough understanding of security vulnerabilities, and hands-on experience with commercial scanning tools. Essential skills include strong problem-solving abilities, excellent communication, and knowledge in programming languages such as C#, Java, or Python. The role involves ensuring secure software development practices and potentially overseeing remediation efforts.

Qualifications

• 5-7 years of experience in security, ideally in application security.
• Experience with certifications like CISSP, CEH, GWAPT, GPEN, OSCP.
• Demonstrated understanding of vulnerability remediation.

Skills

Experience with application scanning tools (e.g., Acunetix, IBM's AppScan)

Understanding of Web Services technologies (XML, SOAP, AJAX)

Web Server configuration knowledge (Microsoft IIS, Apache HTTP Server)

Experience in application level attacks and bypassing firewalls

Secure code review experience

Software Engineering experience

Knowledge of OWASP Top 10

Familiarity with malicious code identification

Understanding of advanced cryptographic concepts

Job description

A leading tech firm in San Francisco is seeking an experienced professional to manage and enhance their Vulnerability Management Program. The ideal candidate will have 5-7 years of experience in application security, a thorough understanding of security vulnerabilities, and hands-on experience with commercial scanning tools. Essential skills include strong problem-solving abilities, excellent communication, and knowledge in programming languages such as C#, Java, or Python. The role involves ensuring secure software development practices and potentially overseeing remediation efforts.