> Markdown version of [/jobs/ext/4550417-security-engineer-web-application-security](https://www.wearedevelopers.com/jobs/ext/4550417-security-engineer-web-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer - Web Application Security

- **Company:** Northern Base
- **Location:** Sunnyvale, CA, United States
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Software System Penetration Testing, Bash Shell, Burp Suite, Cross-Site Request Forgery, Open Web Application Security, Web Application Security, Software Engineering, SQL Injection, SQL Databases, Web Applications, Webinspect, Scripting, Software Security, Cross-Site Scripting (XSS), Kubernetes, Docker, Vulnerability Analysis
- **Published:** November 3, 2026
- **Apply:** https://www.thejobnetwork.com/job/7fa14b85-1e2c-460d-ab18-14b0425cfc89/security-engineer-web-application-security

## About the Role

Must-Have Skills:

 * Security Engineering - 4+ Years
 * Web Application Security - 3+ Years
 * Java / Python Scripting
 * Bash Scripting
 * OWASP Security Standards and Vulnerability Assessment
 * Cross-Site Scripting (XSS)
 * SQL Injection and SQL-Related Security Vulnerabilities
 * Cross-Site Request Forgery (CSRF)
 * Web Application Security Testing and Penetration Testing
 * Burp Suite, WebInspect, and/or OWASP ZAP
 * Application Security Compliance Tickets and Remediation
 * Kubernetes, Containers, and Docker
 * AWS Experience - Minimum 1 Year
 * Security Risk Assessment and Risk Mitigation
 * Strong Written and Verbal Communication Skills

Preferred Experience:

 * Secure Software Development Lifecycle (SSDLC)
 * Security Testing Integration into CI/CD Pipelines
 * Web Application Vulnerability Scanning and Remediation
 * Security Compliance and Risk Management
 * Collaboration with Engineering, Development, QA, and Security Teams
 * Security Awareness and Compliance Education Throughout the Development Lifecycle

## Description

* Assess security risks and drive mitigation for critical web applications.
 * Partner with engineering leaders, developers, QA engineers, and security teams to strengthen application security.
 * Conduct web application security testing, vulnerability scanning, and penetration testing.
 * Use security tools to identify, investigate, and remediate application vulnerabilities.
 * Manage application security compliance tickets and track remediation activities.
 * Support secure application development across the software development lifecycle.
 * Contribute to security standards, compliance activities, and team education.