Security Engineer - Web Application Security

• Assess security risks and drive mitigation for critical web applications.
• Partner with engineering leaders, developers, QA engineers, and security teams to strengthen application security.
• Conduct web application security testing, vulnerability scanning, and penetration testing.
• Use security tools to identify, investigate, and remediate application vulnerabilities.
• Manage application security compliance tickets and track remediation activities.
• Support secure application development across the software development lifecycle.
• Contribute to security standards, compliance activities, and team education.

Must-Have Skills:

• Security Engineering - 4+ Years
• Web Application Security - 3+ Years
• Java / Python Scripting
• Bash Scripting
• OWASP Security Standards and Vulnerability Assessment
• Cross-Site Scripting (XSS)
• SQL Injection and SQL-Related Security Vulnerabilities
• Cross-Site Request Forgery (CSRF)
• Web Application Security Testing and Penetration Testing
• Burp Suite, WebInspect, and/or OWASP ZAP
• Application Security Compliance Tickets and Remediation
• Kubernetes, Containers, and Docker
• AWS Experience - Minimum 1 Year
• Security Risk Assessment and Risk Mitigation
• Strong Written and Verbal Communication Skills

Preferred Experience:

• Secure Software Development Lifecycle (SSDLC)
• Security Testing Integration into CI/CD Pipelines
• Web Application Vulnerability Scanning and Remediation
• Security Compliance and Risk Management
• Collaboration with Engineering, Development, QA, and Security Teams
• Security Awareness and Compliance Education Throughout the Development Lifecycle