Senior Application Security Engineer

Job Summary

To shape an evolving offensive security practice, the full-time Senior Application Security Engineer will lead Red Team engagements against critical applications, collaborate with Blue Team for enhanced defenses, and educate development teams on vulnerability prevention, all while working remotely.

Key responsibilities

• Plan and execute offensive engagements using established techniques and industry-standard tools
• Collaborate with Blue Team to validate detection capabilities and improve defensive measures
• Manage the bug bounty program, including triage, risk assessment, and mitigation guidance

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field, or equivalent hands-on experience
• Demonstrated experience in offensive security work, including web application penetration testing and Red Team engagements
• Proficiency in one modern programming language (preferably Java) and ability to review code in major languages
• Advanced user of Burp Suite Pro with experience in creating or modifying custom extensions
• Excellent communication skills for collaboration across teams and stakeholders