Senior Application Security Engineer

Job Summary

Leading Red Team engagements against critical applications, the full-time Senior Application Security Engineer (Offensive / Red Team) will shape an evolving offensive security practice, collaborating closely with the Blue Team to enhance detection, response, and defenses while educating developers on vulnerability prevention and remediation.

Key Responsibilities

• Plan and execute offensive engagements using manual web penetration testing and industry-standard tools
• Collaborate with the Blue Team to improve detection and alerting coverage, converting offensive findings into defensive improvements
• Manage the bug bounty program, including triage, risk assessment, and mitigation guidance

Required Qualifications

• Bachelor's degree in computer science, cybersecurity, or related field, or equivalent hands-on experience
• Experience in offensive security work, including web application penetration testing and Red Team engagements
• Proficiency in one modern programming language (preferably Java) and code review in major languages
• Advanced user of Burp Suite Pro, with experience in creating or modifying custom extensions
• Strong analytical skills with a risk-based security approach