Senior Security Engineer

Job Summary

Seeking a Senior Security Engineer specializing in application security and penetration testing, this full-time remote position will manage vulnerability identification, conduct penetration tests, and collaborate with Engineering to remediate findings across various products and services.

Key responsibilities

• Conduct threat modeling, secure design, and targeted code reviews for web applications, APIs, and cloud services
• Perform manual and tool-assisted penetration testing, documenting findings and verifying fixes
• Coordinate external penetration testing efforts, including scoping, execution, and remediation tracking

Required qualifications

• Approximately 5+ years of relevant security engineering experience with a focus on application security or penetration testing
• Demonstrated experience in manual testing of web applications and APIs, including authentication and authorization issues
• Knowledge of threat modeling, secure code review, and vulnerability validation
• Experience coordinating third-party penetration tests and reviewing technical findings
• Practical knowledge of OWASP guidance and application security controls in the SDLC