Maryland Licensed Senior Security Engineer

Job Summary

Seeking a Maryland Licensed Senior Security Engineer, this full-time remote position will focus on offensive security testing of TypeScript applications, APIs, and AWS infrastructure, while also engaging in remediation efforts to enhance security practices.

Key responsibilities

• Plan and execute red team and application penetration tests, targeting critical vulnerabilities in a consumer health context
• Develop and implement remediation pull requests and secure coding practices within TypeScript and Node.js environments
• Collaborate with the product security team to manage and improve application security tooling and triage vulnerabilities

Required qualifications

• 6+ years in security or software engineering, with at least 3 years of hands-on offensive security experience
• Proficiency in AWS security practices, including IAM privilege escalation and cloud service misconfigurations
• Experience with TypeScript and Node.js, including shipping production-level code and fixes
• Strong understanding of web and API vulnerabilities, particularly OWASP Top 10 and their remediation
• Familiarity with SAST, DAST, and SCA tools, including their tuning and output triage