Senior Application Security Engineer

Job Summary

Leading Red Team engagements, the full-time Senior Application Security Engineer will shape an evolving offensive security practice, collaborating closely with Blue Team members to enhance detection and response capabilities while educating developers on vulnerability prevention and remediation in a remote work environment.

Key responsibilities

• Plan and execute offensive engagements against applications and infrastructure using established testing techniques and tools
• Collaborate with the Blue Team to validate detection coverage and implement defensive improvements based on offensive findings
• Manage the bug bounty program, including triage, risk assessment, and providing mitigation guidance

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field, or equivalent hands-on experience
• Demonstrated experience in offensive security work, including web application penetration testing and Red Team engagements
• Proficiency in one modern programming language (preferably Java) and ability to review code in major languages
• Advanced user of Burp Suite Pro, with experience creating or modifying custom extensions
• Strong analytical abilities with a risk-based security approach and excellent collaboration skills across teams