Senior Application Security Specialist
Listed on 2026-05-25
-
IT/Tech
Cybersecurity
Job Title:
Application Security Specialist - Invicti
Location:
NJ/TX/NC (5 days onsite) Job Type: FTC/FTE Job Summary
We are seeking an experienced Application Security Specialist to strengthen the security posture of web applications and APIs through Dynamic Application Security Testing (DAST), automated vulnerability scanning, and continuous security testing. This role will leverage Invicti Enterprise to support scalable application security testing across the secure SDLC, including integration within CI/CD pipelines. The ideal candidate will have strong hands‑on experience configuring, operating, and optimizing Invicti (Acunetix/Netsparker) or comparable DAST platforms in an enterprise environment, with demonstrated ability to validate findings, troubleshoot scan issues, and partner effectively with development teams.
Key Responsibilities- Onboard web applications and APIs to the Invicti Enterprise platform for authenticated and unauthenticated DAST scans.
- Configure DAST scans using pre-request scripts and custom scan settings to support complex authentication and application flows.
- Monitor scan execution, status, and failures; troubleshoot issues related to authentication, session handling, crawl limitations, and coverage gaps
- Analyze, validate, and triage vulnerabilities identified by Invicti, distinguishing true positives from false positives and appropriately dispositioning findings
- Perform manual verification using Burp Suite, as needed, to reduce false positives and false negatives
- Integrate DAST scanning into CI/CD pipelines to enable continuous security testing within Dev Ops workflows
- Stay current on emerging web application and API vulnerabilities, OWASP Top 10 and API Top 10, and application security best practices
Skills & Qualifications
- 3-5 years of hands-on experience with Invicti (Acunetix/Netsparker) or comparable enterprise DAST tools
- Solid understanding of OWASP Top 10, CWE, and common web and API vulnerabilities
- Demonstrated ability to analyze scan results and confidently distinguish valid vulnerabilities from false positives
- Strong communication skills with the ability to collaborate effectively with developers, Dev Ops teams, and security stakeholders
- 3-5 years of application security experience, with a focus on DAST and secure SDLC practices
- Experience with additional security tools (e.g., Burp Suite, OWASP ZAP, Snyk, HCL App Scan, Fortify Web Inspect).
- Experience with cloud platforms (AWS, Azure, GCP).
- Security certifications (e.g., CEH, GWAPT, OSCP).
- Knowledge of compliance frameworks (ISO 27001, SOC 2, PCI DSS).
- Experience with CI/CD tools such as Jenkins, Git Hub, or Harness.
- Hands-on experience with web application and API security testing.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).