3 months ago
Remote, WorldwideSenior
Responsibilities
- Operate and enhance application security tool environments.
- Author automation scripts for recurring tasks, with Python preferred.
- Set up and execute authenticated and unauthenticated DAST scans against web applications and APIs.
- Manage scan scheduling, configuration, coverage, and tuning to reduce false positives and improve detection accuracy.
- Validate, categorize, prioritize, and document vulnerabilities based on exploitability, business impact, application criticality, and exposure.
- Partner with development and platform teams on DAST findings and remediation expectations.
- Track remediation, verify fixes through rescanning or targeted validation, and escalate overdue or high-risk vulnerabilities.
- Validate that applications meet security guidelines and compliance standards including HIPAA, SOC II, GDPR, NIST 800-53, and FedRAMP.
- Build solutions that collect and present vulnerability and compliance data to leadership.
Requirements
- Bachelor’s degree and seven years of application security experience.
- Three years of experience administering, running, and analyzing DAST tools.
- Knowledge of AWS or Azure cloud environments.
- Familiarity with software security requirements and compliance programs such as NIST, HITRUST, and FedRAMP.
- Experience developing or testing RESTful APIs, with an understanding of Postman and/or Swagger files.
- Ability to obtain and maintain a Public Trust clearance.
- Experience administering Qualys or Tenable vulnerability management and application security modules is preferred.
- Experience working across multiple teams and disciplines, with strong attention to detail, analytical skills, risk-based prioritization, and sound judgment.
Benefits
- Remote work within the US; no travel is required and relocation assistance is not authorized.
- New hires with start dates of October 1, 2025 or later must attend on-site onboarding, with travel arrangements and related expenses coordinated and paid by the company.
- Benefits may include medical, dental and vision coverage, health savings accounts, flexible spending accounts, disability benefits, life insurance, voluntary benefits, paid absences, and retirement benefits.