Senior Application Security Testing Engineer

What you'll do

• Perform application security testing including SAST, DAST, SCA, and manual validation.
• Conduct threat modeling and secure design reviews for new and existing applications.
• Integrate security tooling into CI/CD pipelines using platforms like GitHub and Azure DevOps.
• Validate security findings and work with developers to drive effective remediation.
• Partner with development teams to embed secure coding practices into design and delivery processes.
• Provide technical documentation and risk summaries for stakeholders.
• Support audits, penetration testing coordination, and compliance evidence collection.
• Contribute to security awareness and secure development training initiatives.

What we're looking for

• Bachelor’s degree in Cybersecurity, Computer Science, or a technology field.
• Three years of experience in application security or secure software development in a private, public, government, or military environment.
• Experience performing application security testing including SAST, DAST, SCA, and manual validation (preferred).
• Experience using common SAST and DAST tools and performing source code analysis (preferred).
• Certifications such as GWAPT, OSCP, or CSSLP (preferred).
• Knowledge of OWASP Top 10, secure coding patterns, and threat modeling.
• Experience with modern development stacks and CI/CD pipelines.
• Strong analytical, communication, and documentation skills.