Staff Application Security Engineer
Skills
- Expertise in OWASP Top 10 and CWE Top 25 with practical penetration testing and remediation experience
- Strong knowledge of Software Security Architecture, SDLC, and CI/CD best practices
- Experience with application security tools such as DAST, SAST, IAST, RASP, and WAF
- Programming and scripting skills in Python, BASH, Go, Java, JavaScript or similar
- Familiarity with security testing tools like Burp Suite, Metasploit, OWASP ZAP, and nmap
- Understanding of mobile security concepts for iOS and Android platforms
Responsibilities
- Partner with Product, Software Engineering, DevOps, and IT teams to integrate security practices
- Perform security risk assessments, penetration testing, threat modeling, and secure coding education
- Deliver and consult on security automation products integrated with CI/CD pipelines
- Lead penetration tests and collaborate with stakeholders on remediation
- Develop security requirements and conduct code reviews to identify vulnerabilities
- Implement and manage application security tools including SAST, DAST, and SCA
Education
- Relevant degree in Computer Science, Cybersecurity, or related field preferred
Benefits
- Comprehensive healthcare plans
- Family building benefits including fertility and adoption/surrogacy support
- Flexible time off and wellness stipends
- Free OneMedical memberships for employees and dependents
- 401(k) retirement plan with employer match
- Meals and snacks at the office
- Learning and development reimbursement programs
Average salary estimate
If an employer mentions a salary or salary range on their job, we display it as an "Employer Estimate". If a job has no salary data, Rise displays an estimate if available.
An exciting opportunity for a Systems and AI Integration Specialist to manage Windows systems, networking, and implement AI-powered automation in a dynamic small team.
A dynamic End-User Support Administrator position at Dotdash Meredith offering hands-on technical support within an in-office IT Service Desk team.
An expert Senior DevSecOps Engineer is needed to champion the organization's secure CI/CD pipelines and DevSecOps strategies, focusing on cloud and on-premises environments.
Lead and manage Anytime Mailbox’s IT infrastructure and cloud services, ensuring scalable, secure, and high-availability environments in a hybrid remote role.
EagleBank is looking for a strategic IAM Manager to lead and develop its identity and access management programs and teams within a regulated financial services environment.
Nelnet Business Services is looking for a Systems Analyst to enhance IT security and risk management practices in a remote full-time role.
Experienced Linux Systems Engineer needed to support and automate Red Hat Linux infrastructure at Tatitlek for BEP's critical printing services mission.
Odyssey Systems is looking for a Cybersecurity Compliance Specialist to ensure DoD and Air Force cybersecurity standards are met on-site at Hanscom AFB.
An IT Consultant with MSP experience is needed at Saltmarsh in Tampa to provide client IT support and contribute to technology projects within a supportive and growth-driven environment.
Experienced Network Administrator needed to support enterprise network operations and cybersecurity for defense communications at Picatinny Arsenal under a veteran-owned joint venture.
Enterprise Application Administrator needed at Venture Global LNG to manage and optimize enterprise applications within a dynamic Oil & Gas environment.
Senior Data Engineer at OHSU to architect and develop data integration and analytics solutions advancing healthcare innovation through AI and machine learning.
Experienced Senior COMSEC Custodian wanted by GovCIO to oversee sensitive communications security material management and compliance in Doral, FL.
Founded in 2010, CLEAR offers a biometric scanning product designed for airport security. The company is headquartered in New York City, New York.
9 jobs
🔮
Hi, I'm Risa! Your AI Career Copilot
you, just ask me below!
