Sr. Application Security Engineer / Ethical Hacker
at Jobr
Cleveland, OH, United States, remote, senior, 5+ years
seen 5d ago
- Threat modeling
- AI Architecture
- APIs
- Web applications
- Application security
- Cloud-native applications
- SDLC
- Penetration testing
- Offensive security
About the role
Apply
Workplace Type
Onsite
What they are looking for
Senior Level
Loading...
Loading description…
The Senior Application Security Engineer position is responsible for planning and performing manual penetration testing of traditional and AI-enabled applications, identifying and validating security vulnerabilities, and partnering with development teams to support remediation. This position will also develop scripts, automation, and custom tools that improve application security testing capabilities and provide technical guidance and mentorship to other members of the Application Security team.
Strategy & Planning
* Acquire and interpret functional, technical, and architectural requirements to plan application security assessments
* Develop testing strategies and test plans based on application functionality, architecture, data flows, and identified risks
* Maintain advanced knowledge of application security testing methodologies, tools, and emerging attack techniques
* Research risks and testing techniques associated with traditional and AI-enabled applications
* Identify opportunities to improve penetration testing methodologies, testing effectiveness, and offensive security capabilities
Acquisition & Deployment
* Evaluate, configure, and use offensive security tools to support application penetration testing
* Develop and maintain scripts, automation, and custom tools to improve testing efficiency and effectiveness
* Establish and maintain testing environments, payloads, and supporting technical resources
* Evaluate new application security and AI security testing tools and techniques
* Assist in developing repeatable testing procedures, methodologies, and technical standards
Operational Management
* Plan and execute penetration tests of traditional and AI-enabled applications end-to-end
Read from jobr.pro, last seen 5d ago.