Web Application Security Engineer — Secure SDLC

Samsung SDS America; Plano (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) match

Paid Holidays

Paid Time off

Flexible spending accounts

Life insurance

Parental leave

Job summary

Samsung SDS America, Inc. is seeking an Information Security Engineer – Web Application Security to join our Cloud Security Team in Plano, TX.

The role focuses on securing web applications through assessments, asset management, and remediation coordination across development and infrastructure teams. You will provide security guidance, analyze vulnerabilities, and help with training developers on secure coding practices.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 2–5 years of information security experience.
• Understanding of OWASP Top 10 and web application security concepts.
• Experience with vulnerability assessments or penetration testing.

Responsibilities

• Perform periodic security assessments and vulnerability testing of web applications.
• Conduct security assessments for newly developed or deployed web applications before production release.
• Maintain and manage the inventory of web applications and related assets.
• Identify, analyze, and document web application vulnerabilities and provide remediation recommendations.
• Track vulnerabilities through remediation and perform follow-up validation or retesting.

Skills

Web security concepts

Vulnerability assessment

Penetration testing

Security tooling

Technical documentation

Developer communication

Education

Bachelor's degree in Computer Science / Information Security / Information Technology

Tools

Burp Suite

OWASP ZAP

WebInspect

Job description

Samsung SDS America, Inc. is seeking an Information Security Engineer – Web Application Security to join our Cloud Security Team in Plano, TX.

The role focuses on securing web applications through assessments, asset management, and remediation coordination across development and infrastructure teams. You will provide security guidance, analyze vulnerabilities, and help with training developers on secure coding practices.