Senior Application Security Tester

Location: Seattle, WA / Hybrid

Experience: 8+ years in Application Security, Penetration Testing, and
Authentication

Role Overview

We seek a Senior Application Security Engineer to lead penetration testing, vulnerability management, and secure SDLC practices
. The ideal candidate will assess applications, APIs, networks, and cloud environments to mitigate security risks, ensure compliance, and enhance security operations.

Key Responsibilities

• Conduct penetration testing & secure code reviews for web, mobile, and APIs.
• Implement SAST/DAST solutions (Checkmarx, Veracode, Snyk).
• Perform threat modeling & vulnerability assessments (Nmap, Nessus, Qualys).
• Work with SOC teams & SIEM tools (Splunk, QRadar, Azure Sentinel) for incident response.
• Integrate Dev Sec Ops  into CI/CD pipelines and ensure cloud security in AWS, Azure, GCP.
• Ensure compliance with PCI-DSS, HIPAA, NIST, ISO 27001.
• Mentor teams on secure coding & cybersecurity best practices.

Skills & Qualifications

• 8+ years in Application Security & Penetration Testing.
• Hands-on expertise in Burp Suite, Kali Linux, Metasploit, Nmap, Wireshark.
• Strong knowledge of OWASP Top 10, MITRE ATT&CK, firewall security.
• Experience with .NET, Java, Python, C/C++ for code analysis.
• Certifications (CEH, CISSP, OSCP) are a plus.