Senior DAST & Application Security Consultant

MassMutual; Springfield (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

MassMutual is seeking an Application Security Consultant to advance our DAST program, owning how we test running applications and APIs for exploitable weaknesses and embedding security into the software delivery lifecycle.

You will partner with development teams, security architects, and DevOps to design secure architectures, integrate DAST into CI/CD pipelines, triage findings, and drive remediation.

Qualifications

• Bachelor’s degree in a related field.
• 8+ years in application security, pentesting, or secure software development.
• Proven experience with DAST tooling and secure SDLC practices.

Responsibilities

• Own and mature the DAST program across web apps and APIs.
• Design authenticated dynamic scans for complex apps and APIs.
• Integrate DAST into CI/CD and pre-production environments.
• Triage DAST findings and provide remediation guidance.
• Perform manual testing to identify and rank risks.
• Collaborate with security architects and DevOps to build secure design.
• Maintain SAST and SCA toolchain alongside DAST.
• Support incident response for application security events.
• Educate developers on secure coding practices.
• Stay current on threats and industry trends.

Skills

DAST tooling

Authenticated scans

CI/CD integration

DevSecOps

Web app security

Cloud security

Programming familiarity

Education

Bachelor's degree

Tools

Burp Suite

OWASP ZAP

Invicti

Acunetix

StackHawk

Job description

MassMutual is seeking an Application Security Consultant to advance our DAST program, owning how we test running applications and APIs for exploitable weaknesses and embedding security into the software delivery lifecycle.

You will partner with development teams, security architects, and DevOps to design secure architectures, integrate DAST into CI/CD pipelines, triage findings, and drive remediation.