Senior Application Security Engineer

Job Summary

Leading Red Team engagements, the full-time Senior Application Security Engineer will shape an evolving offensive security practice, collaborating closely with the Blue Team to enhance detection and response while managing the bug bounty program and driving vulnerability remediation efforts.

Key responsibilities

• Plan and execute offensive engagements against applications and infrastructure, utilizing manual penetration testing and industry-standard tools
• Collaborate with the Blue Team to improve detection capabilities and convert offensive findings into defensive enhancements
• Manage the bug bounty program, including triaging vulnerabilities and providing mitigation guidance

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field, or equivalent hands-on experience
• Demonstrated experience in offensive security work, including web application penetration testing and Red Team engagements
• Proficiency in one modern programming language (preferably Java) and ability to review code in various languages
• Advanced user of Burp Suite Pro, with experience in creating or modifying custom extensions
• Strong analytical skills with a risk-based security approach and excellent collaboration abilities