Senior Application Security Engineer

Job Summary

Leading Red Team engagements, the full-time Senior Application Security Engineer will shape an evolving offensive security practice by collaborating with Blue Team members to enhance detection and response capabilities while educating developers on vulnerability prevention and remediation, all in a remote work environment.

Key responsibilities

• Plan and execute offensive security engagements against applications and infrastructure, utilizing manual penetration testing and industry-standard tools
• Collaborate with Blue Team to validate detection capabilities and convert offensive findings into defensive improvements
• Manage the bug bounty program, including triage, risk assessment, and mitigation guidance

Required qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical field, or equivalent hands-on experience
• Proven experience in offensive security work such as web application penetration testing or Red Team engagements
• Proficiency in one modern programming language (preferably Java) and ability to review code in various languages
• Advanced user of Burp Suite Pro, with experience in creating or modifying custom extensions
• Strong analytical skills with a focus on risk-based security approaches