Application Security Engineer - (5 months Contract)

Role overview

Review and validate security vulnerability reports submitted to managed testing programs. The role combines technical analysis with clear communication: you assess whether findings are accurate and actionable, determine their severity, and coordinate with researchers or clients when reports need clarification. You also help escalate critical issues and may contribute code or tooling to improve the triage process.

Responsibilities

- Triage incoming vulnerability reports for validity, accuracy, and severity. - Request additional details from researchers or clients when evidence or reproduction steps are incomplete. - Escalate and communicate high-severity findings as part of incident response. - Apply knowledge of common web and application security weaknesses to evaluate submissions. - Contribute to individual projects and collaborate with the wider technical team. - Use scripting or development skills to support improvements to validation workflows and tools.

Requirements

- A bachelor’s degree or prior experience in security consulting. - Demonstrated interest in security assessment research, supported by published work or other evidence. - Strong proficiency with Burp Suite or a comparable interception proxy. - Working familiarity with standard security testing tools, such as network scanners and web testing utilities. - Strong organization, communication, and follow-through, including the ability to meet deadlines and manage independent work.

Benefits and work setup

- Fully remote, work-from-home position. - The role is listed as a five-month contract.