Senior Application Security Engineer

Job Summary

To enhance an evolving offensive security practice, the full-time Senior Application Security Engineer will lead Red Team engagements against critical applications, collaborate with Blue Team for improved defenses, and educate developers on vulnerability prevention while working remotely.

Key responsibilities

• Plan and execute offensive engagements against applications using manual penetration testing and industry-standard tools
• Collaborate with the Blue Team to validate detection capabilities and improve defensive measures based on offensive findings
• Manage the bug bounty program, including triage, risk assessment, and providing mitigation guidance

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field, or equivalent hands-on experience
• Proven experience in offensive security work, including web application penetration testing and Red Team engagements
• Proficiency in one modern programming language, preferably Java, and ability to review code in most major languages
• Advanced user of Burp Suite Pro, with experience in creating or modifying custom extensions
• Strong analytical skills with a risk-based approach to security