Dynamic Application Security Testing

Dynamic Application Security Testing Engineer Jobs

5 jobs found

Today

Staff Product Security Engineer, Reviews

Okta San Francisco, CA

San Francisco, CA

Today

$180k - $248k/yr Full time Ai Security Api Security Application Security

Apply Now

Job Description

The Staff Product Security Engineer will conduct security reviews, guide secure development practices, and handle externally reported vulnerabilities across Okta's products, including code reviews, penetration testing, and architectural security assessments.

Responsibilities

Conduct security reviews including design reviews, threat modeling, and penetration testing for new features and major changes.
Perform manual secure code reviews across multiple programming languages.
Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
Lead product security incidents, assess risks, and drive remediation efforts.
Develop security tools and automation to improve vulnerability detection and assessment.
Mentor junior engineers and provide guidance to non-security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Requirements

Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
Strong experience in penetration testing and secure development practices.
Deep technical background in assessing Large Language Models and securing AI integrated software architectures.
Proficiency in multiple programming languages, including Java, Go, Python, and C/C++.
Deep understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
Strong communication skills to explain risks and remediation to developers and leadership.
Ability to automate security testing using large language models and scripting (Python, Bash, etc.).
Experience leading security incidents and risk assessments.

Technologies

Java
Go
Python
C/C++
OIDC
SAML
OAuth
Large Language Models (LLMs)
SAST
DAST
SCA
Fuzzing tools

Benefits

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

View full job page →

Today

Application Security Engineer

Cigars International Bethlehem, PA

Bethlehem, PA

Today

$125k+/yr Full time Application Security Cybersecurity Tools DevSecOps

Apply Now

Job Description

The Application Security Engineer is an onsite role in Bethlehem, PA focused on embedding security by design across the enterprise SDLC, with a salary of USD 125,000 per year.

Responsibilities

Evaluate and continuously refine SDLC processes, tooling, and release workflows from a security perspective.
Conduct gap analyses against secure-development frameworks, including NIST SSDF and OWASP ASVS.
Define, maintain, and evolve secure development standards and procedures aligned with PCI DSS and privacy regulations such as CCPA and GDPR.
Collaborate with engineering teams to propose and implement practical security improvements across the SDLC.
Embed security controls across all SDLC phases, including planning, design, coding, testing, deployment, and maintenance.
Deliver threat modeling, secure-design guidance, and architecture reviews of applications.
Establish and support secure design and code-review practices, coaching developers on security best practices.
Balance security requirements with developer experience and business needs to minimize friction while increasing security maturity.
Deploy, operate, and optimize application security tooling such as SAST, DAST, and SCA solutions.
Integrate security tooling, including Snyk and Checkmarx, into CI/CD pipelines to enable automated vulnerability detection.
Define and enforce security gates at key points within development and release workflows.
Ensure vulnerability findings are actionable, prioritized, and integrated into remediation processes.
Support static, dynamic, and penetration testing activities in collaboration with internal and external resources.
Integrate vulnerability management, continuous monitoring, and remediation tracking into the SDLC.
Provide application-security support during security incidents and assist teams with investigation and remediation.
Support secure platform and environment modernization efforts, including container security, OS hardening, and secrets management (e.g., Vault, Azure Key Vault).
Contribute to application and platform architecture improvements focused on security, stability, and resilience.

Requirements

3+ years of experience in Application Security or Software Engineering with a focus on secure development practices.
Hands-on experience implementing secure SDLC frameworks such as NIST SSDF and OWASP ASVS.
Practical experience integrating SAST/DAST tools into CI/CD pipelines and workflows.
Working knowledge of PCI DSS and privacy regulations (CCPA/GDPR) as they impact software development.
Strong communication skills with the ability to influence and collaborate with engineering teams.

Technologies

SAST
DAST
SCA
Snyk
Checkmarx
Vault
Azure Key Vault
NIST SSDF
OWASP ASVS
PCI DSS
CCPA/GDPR
OWASP Top 10

Benefits

401(k) matching
Dental insurance
Health insurance
Paid time off
Tuition reimbursement
Vision insurance

Preferred Qualifications

Experience with container security, image hardening, and secrets management technologies.
Familiarity with the OWASP Top 10, API security, and modern application security practices.
Experience coordinating or supporting penetration testing or DAST programs.
Relevant certifications such as CSSLP, CISSP, GWAPT, GCSA, or similar.

View full job page →

2d ago

Staff Product Security Engineer, Reviews

Okta Chicago, IL

Chicago, IL

2d ago

$180k - $248k/yr Full time Application Security Cybersecurity Tools Dynamic Application Security Testing

Apply Now

Job Description

Join Okta in Chicago, IL on a hybrid schedule as a Staff Product Security Engineer focused on security reviews, threat modeling, and vulnerability management for Okta’s products. The role includes code reviews, penetration testing, and architectural security assessments with emphasis on authentication protocols and AI/LLM security. This position offers a competitive annual salary range of USD 180,000 to 247,500.

Benefits

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

Responsibilities

Conduct security reviews that cover design assessments, threat modeling, and penetration testing for new features and major changes.
Perform manual secure code reviews across multiple programming languages.
Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
Lead product security incidents, assess risk, and drive remediation efforts.
Develop security tools and automation to improve vulnerability detection and assessment.
Mentor junior engineers and advise non-security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Requirements

Proven ability to identify OWASP Top 10 and CWE Top 25 vulnerabilities via manual code reviews.
Strong experience in penetration testing and secure development practices.
Deep technical background in evaluating Large Language Models and securing AI-enabled software architectures.
Proficiency with multiple programming languages, including Java, Go, Python, and C/C++.
Solid understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
Effective communication skills to explain risks and remediation to developers and leadership.
Ability to automate security testing using LLMs and scripting (Python, Bash, etc.).
Experience leading security incidents and risk assessments.

Technologies

Java, Go, Python, C/C++, Bash
SAML, OAuth, OIDC
Large Language Models (LLMs)
SAST, DAST, SCA, fuzzing tools

Desired Skills and Abilities

Experience in mobile (iOS/Android) and desktop (Windows/macOS) security testing.
Familiarity with SAST, DAST, SCA, and fuzzing tools.
Strong cryptographic knowledge and secure implementation practices.
Experience analyzing network protocols and traffic security.
Ability to develop proof-of-concept exploits to demonstrate vulnerabilities.

View full job page →

3d ago

Application Security Engineer, AI & Automation

Skill Remote 🌍 Remote

Remote

3d ago

$90 - $92/hr Contract Ai Governance Ai Security Application Security

Apply Now

Job Description

Benefits and why you’ll thrive in this role

Skill offers a remote, contract opportunity for a senior Application Security Engineer focused on AI powered automation. This role provides the flexibility of a remote arrangement, a competitive hourly range of USD 90 to 92, and the chance to shape security tooling that leverages frontier large language models for vulnerability identification, code reasoning, triage acceleration, and automated remediation. You will collaborate with distributed teams to impact how security is integrated into developer workflows, with emphasis on unified triage, software supply chain defense, and governance for new AI capabilities across the enterprise.

Responsibilities

AI and Automation Engineering: Test, implement, and optimize application security tooling that uses frontier LLMs to identify vulnerabilities, reason about code, speed triage, and drive automated remediation.
Modern Triage and Incident Response: Deliver unified triage coverage for SCA, SAST, and DAST findings. Lead rapid assessment and routing of threat intelligence escalations and critical patch events (PatchNow).
Software Supply Chain Defense: Strengthen open-source dependency selection, package intake, and SBOM visibility. Build guardrails to detect malicious packages and enforce security policies across developer pipelines.
Secure Developer Workflows: Assess and secure developer environments, including IDEs, plugins/extensions, package managers, and AI coding assistants against malicious code and unsafe configurations.
AI Governance Support: Assist with technical proofs of value, data handling reviews, and model output evaluations required to safely onboard new AI capabilities across the enterprise.

Requirements

Experience: 3+ years of hands-on Application Security, with deep familiarity across the vulnerability lifecycle (SCA, SAST, DAST, and manual verification).
Automation Mindset: Strong engineering fundamentals with scripting languages (Python, Go), APIs, CI/CD pipelines (GitHub Actions, GitLab CI), and developer tool integrations.
AI Curiosity: Practical familiarity or hands-on experimentation with frontier models, AI coding assistants (e.g., Copilot), prompt engineering, or AI orchestration frameworks.
Supply Chain Knowledge: Experience securing software supply chains, package managers, and third-party dependencies against modern attack vectors.
Communication: Ability to translate complex vulnerabilities into clear, actionable remediation guidance for software engineering teams.

Technologies

Python
Go
GitHub Actions
GitLab CI
Copilot

Bonus Points

Contributions to open-source security tools or AI/LLM security projects (for example, OWASP Top 10 for LLMs).
Experience building custom integrations or LLM agents to automate security analyst workflows.

View full job page →

4d ago

Senior Application Security Engineer

Calance US Houston, TX

Houston, TX

4d ago

$80 - $100/hr Full time Senior Ai Security Application Security

Apply Now

Job Description

Calance US is hiring a Senior Application Security Engineer for a hybrid role in Houston, TX. The position centers on embedding security into the software development lifecycle using SAST and DAST, augmented by AI-enabled tooling. The role collaborates with development, DevOps, and security teams to promote secure coding practices and strengthen the application risk posture. Compensation is USD 80 - 100 per hour, and the role requires a minimum of seven years of relevant experience.

Role Overview

The Senior Application Security Engineer will help secure the software development lifecycle by combining traditional SAST/DAST approaches with AI-enabled tools to identify and remediate code vulnerabilities. This role works closely with development, DevOps, and security teams to drive secure coding practices and scale risk improvements across the organization. AI-driven capabilities will be leveraged to enhance vulnerability detection accuracy, automate code reviews, and accelerate remediation throughout the SDLC.

Responsibilities

Integrate application security into the SDLC, CI/CD pipelines, and developer workflows
Lead and perform SAST, DAST, SCA, and API security testing
Utilize AI-based code scanning to improve vulnerability detection, reduce false positives, and speed remediation
Collaborate with developers to remediate vulnerabilities and strengthen secure coding practices
Conduct threat modeling and security reviews for applications and APIs
Track, analyze, and report security metrics such as vulnerability trends and remediation timelines
Deploy and manage AI-powered code scanning across source code, APIs, and dependencies
Apply AI/ML to identify complex vulnerability patterns, insecure coding practices, and hidden attack paths
Leverage AI to reduce false positives and improve signal-to-noise, enabling efficient triage
Provide root-cause analysis and actionable remediation guidance through AI-assisted insights
Integrate AI-enabled security scanning into CI/CD pipelines to deliver real-time feedback on development and commits
Evaluate and optimize AI models and rulesets to improve detection accuracy and align with enterprise risk priorities
Partner with engineering teams to embed AI-assisted code review and secure coding recommendations into pull requests and IDE plugins
Monitor and measure the effectiveness of AI-based scanning using metrics such as detection rates and remediation speed
Stay current with emerging AI security tools, LLM-based code analysis, and automated remediation technologies, promoting adoption where value is demonstrated

Requirements

7+ years of experience in application security, DevSecOps, or secure software engineering
Strong knowledge of OWASP Top 10 and secure coding practices
Experience with application security tools such as SAST, DAST, and SCA
Experience integrating security into CI/CD pipelines
Knowledge of Ghazdo and GitHub Advance security
Proficiency in at least one programming language (Python, Java, JavaScript)

Technologies

Python
Java
JavaScript
SAST
DAST
SCA
GitHub Advanced Security
Ghazdo

View full job page →

Dynamic Application Security Testing Engineer Jobs

Staff Product Security Engineer, Reviews

Application Security Engineer

Staff Product Security Engineer, Reviews

Application Security Engineer, AI & Automation

Senior Application Security Engineer

Get Dynamic Application Security Testing Engineer Jobs alerts