Job Description

Salary: $102,000 - 142,000 per year Requirements:

• We require at least two years of software or application development experience.
• We typically look for a bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or a related discipline, plus at least three years of experience in IT or a related area.
• We expect at least one year of experience in information security, network engineering, or application development.
• We may consider equivalent work experience in place of the degree requirement.

• We review application source code for potential security weaknesses under the direction of senior application security consultants.
• We perform manual and automated security testing on live applications, including dynamic application security testing.
• We partner with DevOps teams to integrate application security services into their workflows.
• We train DevOps personnel and developers to use application security tools effectively.
• We work directly with developers to explain vulnerabilities and help define remediation approaches.
• We recommend appropriate application security training paths.
• We protect applications in production by enrolling them in continuous assessment programs for existing and emerging threats.
• We evaluate web application firewalls, tune rules, review alerts, and investigate issues as needed.
• We communicate investigative findings clearly to non-technical audiences.
• We collaborate with technology risk teams and business stakeholders to address and remediate identified issues.
• We advise leadership on remediation strategies for findings uncovered through security testing.
• We assess how security test plans affect upstream and downstream solution components.
• We track KPI goals and performance metrics on an ongoing basis.
• We contribute to continuous improvement by helping develop, implement, and maintain standardized security tools, templates, and processes.
• We analyze security test data, including root cause analysis, to support vulnerability assessment efforts.
• We execute vulnerability assessment and penetration testing plans and methodologies across moderately complex technology initiatives.
• We research industry trends, emerging threats, best practices, and advanced techniques to uncover vulnerabilities and recommend security solutions.
• We prepare scheduled reports and share regular security metrics with IT teams as appropriate.

• DevOps
• Support
• Network
• Security
• Web
• WAF

More:

We are seeking an application security professional who will help strengthen the security of our applications through testing, vulnerability analysis, and production protection activities. In this role, we work closely with DevOps teams, developers, technology risk partners, and business stakeholders to improve our overall security posture. We also emphasize continuous learning, process improvement, and regular reporting to support our security objectives.

last updated 31 week of 2026

Job Tags

Similar Jobs