Owasp

Owasp Engineer Jobs

3 jobs found

Today

Application Security Engineer

Wawa, Inc. Media, PA

Media, PA

Today

Full time Application Security Container Security Information Security

Apply Now

Job Description

Wawa is hiring an Application Security Engineer to run day-to-day application security operations and strengthen secure software practices across the SDLC.

Responsibilities

Collaborate with developers and product owners to apply application security best practices throughout the software development lifecycle
Research and communicate current and emerging application security threats plus recommended solutions
Maintain and iterate on secure coding practices, policies, standards, and procedures
Test applications for security threats and vulnerabilities
Support application security vulnerability management
Create and deliver security presentations for technical and non-technical internal audiences
Find security design gaps in existing and proposed applications and recommend enhancements
Identify gaps and inefficiencies in the Application Security Program and propose improvements
Participate in and support application security reviews, penetration tests, and threat modeling
Contribute to the direction of internal security-focused programs
Assist with development of metrics and a reporting framework to measure program effectiveness
Support technology security policies and standards and help ensure they apply to technology architectures
Assist in ensuring ongoing compliance with regulatory obligations and internal policies/standards
Provide support to the Technology Security Incident Response team during cyber incidents
Maintain internal networks across information security, information technology, and development to align on initiatives
Maintain external networks with industry peers, ecosystem partners, vendors, and other parties to track common trends, findings, and risks
Act as a technical resource for business teams and IT to plan, implement, and support new and existing software
Support IT audit and assessment activities, including annual PCI audit and IT general controls review
Provide application security guidance for IT and business-related projects as required, and participate in security-related projects
Work with business units to support application security engineering requirements and advocate secure development best practices

Requirements

Minimum 2 years of experience in a complex technology environment in the application security engineering field
Proven experience securing custom software
Ability to work individually and in a team environment
Ability to learn on the job; ability to track task progress effectively
Experience working with teams of developers and product owners
Excellent written and verbal communication, interpersonal and collaborative skills; ability to communicate application security and risk concepts to diverse audiences
Ability to remain calm and competent in high-pressure situations
Critical thinker with strong problem-solving skills
Ability to manage multiple projects under strict timelines in a dynamic environment
Ability to engage in internal security technology and security remediation projects
Ability to understand large technology implementations spanning hundreds of physical and virtual environments
High personal integrity; ability to handle confidential matters with appropriate judgment and maturity
High initiative and dependability; ability to work with little supervision and adapt to change
Ability to participate in on-call rotation (24x7x365) for information security incidents
Advanced knowledge of containers and container security
Solid knowledge of cloud technology and security
Solid knowledge of Java; basic knowledge of Golang
Basic knowledge of React and React Native
Experience reading and writing enterprise software
Experience preventing and remediating software security flaws in enterprise software
Up-to-date knowledge of common security weaknesses and how to prevent/remediate
Advanced knowledge of OWASP guidance
Solid knowledge of web-related protocols: TCP/IP, HTTP, HTTPS, REST, etc.
Understanding of relevant legal/regulatory requirements such as Payment Card Industry Data Security Standard
Degree in computer science preferred or equivalent professional experience
Professional security management certification preferred (examples listed): CISSP, CISM, GDSA, CSSLP, CEH, etc.
Solid knowledge of security management frameworks such as Critical Security Controls, NIST 800-53, and Cybersecurity Framework
Significant knowledge of application security concepts/technologies including SAST, DAST, SCA, IaC, cryptography, authn/authz, API security, etc.
Strong understanding of cloud, application security, and software engineering principles
Experience with scripting/automation (examples listed): Python, PowerShell, Unix shell, JavaScript, TypeScript, etc.
Proven experience and strong understanding of DevSecOps and SAFE Agile working methodologies
Ability to maintain a positive attitude by committing to new ideas, being enthusiastic, and being helpful and considerate across the organization

Technologies

container security
Java
Golang
React
React Native
OWASP guidance
TCP/IP
HTTP
HTTPS
REST
Payment Card Industry Data Security Standard
Critical Security Controls
NIST 800-53
Cybersecurity Framework
SAST
DAST
SCA
IaC
cryptography
authn/authz
API security
Python
PowerShell
Unix shell
JavaScript
TypeScript
DevSecOps
SAFE Agile
PCI audit
IT general controls review

Location and Experience

Location: Media, PA (onsite)
Minimum experience: 2 years
Education: Degree in computer science (preferred) or equivalent professional experience

View full job page →

1mo ago

Application Security Engineer

Wolfe, LLC Pittsburgh, PA

Pittsburgh, PA

1mo ago Closed

$110k - $120k/yr Full time Api Security Application Security Bot Management

This position is no longer accepting applications (closed Aug 12, 2026).

Job Description

Application Security Engineer role with Wolfe, LLC in Pittsburgh, PA, onsite five days per week.

Responsibilities

Conduct code reviews, SAST/DAST testing, basic penetration testing, and lightweight threat modeling, collaborating with developers to remediate vulnerabilities across application code, libraries, containers, and infrastructure as code.
Integrate and operate automated security tooling (for example Snyk, SemGrep, Cycode) within CI/CD pipelines across code repositories such as GitHub, GitLab, Jenkins, and AWS DevOps, and assist with triage and reporting of findings.
Oversee vulnerability management programs, scanning tools, and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs.
Support Bot Management, Web Application Firewall, secrets management, and API security controls across Wolfe's applications.
Promote secure coding standards aligned with OWASP and SANS CWE Top 25, and contribute to measuring DevSecOps maturity using DSOMM or BSIMM.
Collaborate with developers, security operations, product management, and incident response teams, sharing secure-coding and vulnerability-management practices while expanding personal expertise.

Requirements

Minimum 2 years of experience in application security, DevSecOps, or security-exposed software development, including developers transitioning into security roles; Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field (equivalent experience accepted).
Strong coding background with working knowledge of secure coding principles (OWASP Top 10, SANS CWE Top 25).
Hands-on exposure to CI/CD pipelines (GitHub, GitLab, Jenkins, AWS DevOps) and interest in embedding security tooling into those workflows.
Excellent verbal and written communication skills, capable of explaining security concepts to technical and non-technical teammates.
Willingness to learn enterprise security tooling (vulnerability scanners, Bot Management, SAST/DAST/SCA) and maturity frameworks such as DSOMM or BSIMM; prior experience is a plus but not required.
No mandatory certifications; familiarity with CISSP, OSCP, GCSA, AWS Security Specialty, or CSSLP is a plus, and Wolfe will support pursuing them.

Technologies

Snyk
SemGrep
Cycode
GitHub
GitLab
Jenkins
AWS DevOps
DSOMM
BSIMM
OWASP Top 10
SANS CWE Top 25
SAST
DAST
SCA
Bot Management
WAF

Benefits

Restricted Stock Units (RSUs)
Profit Share and/or Incentive Bonus
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of the premium)
Short-Term Disability Insurance (Wolfe pays 100% of the premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable donation to a charity of your choice yearly
Employee referral bonus
Tuition reimbursement
Internal training and information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club

Impact Statement

Update the existing Application Security Strategy and improve monitoring and KPI reporting
Deliver a significant improvement to at least one automated security tool in the production CI/CD pipeline and establish a documented triage workflow
Drive additional Bug Bounty submissions and strengthen bot management protections before the end of Q3
Provide product and technology advisement and testing for new application and AI functionality
Develop and plan a targeted Application and AI development training program

View full job page →

1mo ago

Software Engineer: Full-Stack Web Developer

Nanobiosym Cambridge, MA

Cambridge, MA

1mo ago Closed

$110k+/yr Full time Backend Developer Python API

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

Nanobiosym, a dynamic digital health company based in Cambridge, MA, is expanding its on-site technology team with a senior full-stack developer. The role centers on architecting and delivering secure, scalable web and e-commerce platforms, with a strong emphasis on AWS cloud solutions and close collaboration with executive leadership to align technology with business goals.

Responsibilities

Design and implement an integrated web footprint that covers the corporate site and the e-commerce storefront, ensuring responsive behavior across desktops, tablets, and mobile devices.
Create, build, and deploy end-to-end web and e-commerce solutions that adapt seamlessly to desktop and mobile environments.
Develop and refine AWS-driven cloud infrastructure using EC2, S3, Lambda, and RDS to achieve high availability, scalability, and cost efficiency.
Enforce top-tier security practices including SSL/TLS, OAuth2, and encryption, while maintaining GDPR, HIPAA, and related compliance requirements.
Utilize modular frameworks such as React, Node.js, and Python/Django to support rapid scalability and evolving business needs.
Work in close partnership with the CEO to align technical execution with strategic business goals, presenting progress in accessible language.
Create UI/UX designs that reinforce the brand and deliver coherent, user-focused interfaces.
Build analytics dashboards using Tableau or Power BI to monitor user behavior, sales trends, and system performance.
Implement robust security controls and maintain alignment with industry standards.
Continuously assess and adopt emerging technologies to keep the digital presence future-ready.

Requirements

More than five years of full-stack web development experience.
Proficiency in HTML5 and CSS3, with expertise in a JavaScript framework (React, Angular, or Vue) and strong responsive design.
Experience with server-side languages such as Node.js and Python, including building and managing RESTful APIs.
Deep knowledge of SQL and relational databases (PostgreSQL, MySQL, AWS RDS) as well as NoSQL options (MongoDB, DynamoDB, DocumentDB), with experience optimizing complex queries.
Advanced expertise in AWS services, cloud architecture, and administration.
Hands-on experience deploying on AWS, serverless architecture, version control, and DevOps tools including CI/CD pipelines, Docker, and Git.
Knowledge of OWASP standards, security testing, and secure authentication workflows including user authentication and authorization.
Strong understanding of web security best practices and their implementation.
Excellent communication and problem-solving skills with the ability to devise and present roadmaps to non-technical stakeholders.
Experience building e-commerce platforms and integrating payment gateways.
Strong problem-solving abilities and meticulous attention to detail.

Technologies

HTML5
CSS3
JavaScript
React
Angular
Vue
Node.js
Python
Django
Tableau
Power BI
PostgreSQL
MySQL
AWS
EC2
S3
Lambda
RDS
MongoDB
DynamoDB
DocumentDB
RESTful APIs
Docker
Git
CI/CD
Serverless
SSL/TLS
OAuth2
OWASP

Benefits

Contribute to the core digital infrastructure of a rapidly expanding diagnostics leader.
Ongoing learning opportunities in emerging technologies such as AI/ML and edge computing.
Direct collaboration with the executive leadership team.
Competitive compensation and benefits package.
Support for professional development and ongoing education.

Company Overview

We are a dynamic, growing digital health company focused on revolutionizing healthcare through innovative technology. As we expand our digital presence, we seek a talented Full-Stack Web Developer to lead our e-commerce and outreach initiatives. The ideal candidate will be a proactive self-starter with a proven track record of building secure, scalable, and user-friendly web applications that align with brand strategy and business objectives.

Preferred Qualifications

Branding experience is preferred.
Portfolio demonstrating UI/UX projects aligned with brand strategy is preferred.
Familiarity with Python for data analysis and AI/ML integration in web applications.
AWS Certified Developer, AWS Solutions Architect, or equivalent credentials.

What We Offer

Shape the core digital infrastructure of a rapidly growing diagnostics leader.
Continuous learning opportunities in emerging tech (AI/ML, edge computing).
Direct collaboration with executive leadership.
Competitive salary and benefits package.
Professional development and learning opportunities.

View full job page →

Owasp Engineer Jobs

Application Security Engineer

Application Security Engineer

Software Engineer: Full-Stack Web Developer

Get Owasp Engineer Jobs alerts