Web App Security Engineer — Secure Dev & Remediation

Samsung SDS; Plano (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Parental leave

401K match

Flexible spending accounts

Life insurance

Paid holidays

Paid time off

Job summary

Samsung SDS is seeking a detail-oriented Information Security Engineer – Web Application Security to join our Cloud Security Team in Plano, TX. You will conduct web application security assessments, manage assets, and track vulnerabilities through remediation with developers and infrastructure teams.

You will provide security guidance, analyze reported vulnerabilities, and assist with remediation, collaborating across business units and customers to improve the security posture of web apps.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience.
• 2–5 years of experience in information security, web application security, vulnerability management, or a related field.
• Understanding of web application security concepts and common vulnerabilities, including the OWASP Top 10.
• Experience conducting web application vulnerability assessments or penetration testing.
• Knowledge of HTTP/HTTPS, web architecture, authentication, session management, APIs, and common web technologies.
• Familiarity with web security testing tools such as Burp Suite, OWASP ZAP, WebInspect, or similar tools.
• Ability to analyze vulnerability findings, identify exploitable security risks, and distinguish legitimate findings from false positives.
• Understanding of secure coding principles, vulnerability remediation, and validation techniques.
• Basic knowledge of operating systems, networking, and infrastructure security.
• Strong technical documentation and communication skills, with the ability to clearly communicate security findings and remediation requirements to developers and other stakeholders.
• Ability to collaborate effectively with application developers, infrastructure teams, information security teams, business units, and other stakeholders.

Responsibilities

• Perform periodic security assessments and vulnerability testing of company and customer-facing web applications.
• Conduct security assessments for newly developed or newly deployed web applications before production release.
• Maintain and manage the inventory of web applications and related assets, ensuring accuracy and consistency of asset information.
• Identify, analyze, and document web application vulnerabilities and provide remediation recommendations to development and system teams.
• Track identified vulnerabilities through remediation and perform follow-up validation or retesting to confirm successful resolution.
• Provide security guidance and technical support to developers for vulnerability remediation.
• Develop and deliver secure development training for developers, including common web application vulnerabilities, secure coding practices, and vulnerability prevention.
• Investigate reported security concerns or vulnerabilities affecting specific websites and support the responsible teams in analysis, remediation, and validation.
• Prepare and maintain vulnerability assessment reports, remediation status, and supporting documentation.
• Collaborate with development, infrastructure, security, and customer teams to improve the overall security posture of web applications.

Skills

Vulnerability assessment

Threat analysis

Communication

Cross-functional collaboration

Security training

Education

Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field

Tools

Burp Suite

OWASP ZAP

WebInspect

Job description

Samsung SDS is seeking a detail-oriented Information Security Engineer – Web Application Security to join our Cloud Security Team in Plano, TX. You will conduct web application security assessments, manage assets, and track vulnerabilities through remediation with developers and infrastructure teams.

You will provide security guidance, analyze reported vulnerabilities, and assist with remediation, collaborating across business units and customers to improve the security posture of web apps.