Application Security Developer III

Role overview Support an application security program by testing software, assessing security findings, and helping development teams address vulnerabilities. The work covers web applications, services, and mobile applications, combining hands-on security analysis with source review and software development to improve security tools and practices.

Responsibilities - Test web, web service, and mobile applications with tools such as Burp Suite and assess whether findings can be exploited. - Document security issues with proof-of-concept evidence and practical remediation guidance. - Review source code for security concerns and help maintain or improve static and dynamic testing tools and processes. - Build software and automation that integrates or extends security tools and workflows. - Advise on secure solution design and help development teams integrate protections such as web application firewalls and OAuth or OpenID Connect providers. - Coordinate effectively with colleagues and developers in a distributed team.

Requirements - A computer science or software engineering degree, or equivalent relevant experience. - At least five years of software development experience. - Programming skills across relevant languages such as JavaScript, Python, Go, C#, PHP, Ruby, Java, PowerShell, or T-SQL. - Strong understanding of HTTP, web hosting, networking fundamentals, and application security weaknesses, including common OWASP risks. - Familiarity with software development lifecycles, troubleshooting, and automated testing; clear written and verbal communication skills. - Ability to analyze problems, prioritize work, learn new technologies, and contribute independently and collaboratively.

Nice to have Experience with application security testing, multi-tier application design, Burp Suite or ZAP, static or dynamic analysis tools, and OAuth/OIDC. OSCP or OSWE certification is preferred.

Benefits and work setup The position is salaried and based in a general office environment, where sitting or standing for extended periods may be required. Additional compensation may include a performance-based bonus, and a comprehensive benefits package is available.