Owasp

Owasp Engineer Jobs

2 jobs found

6d ago

Application Security Engineer

Wolfe, LLC Pittsburgh, PA

Pittsburgh, PA

6d ago

$110k - $120k/yr Full time Api Security Application Security Bot Management

Apply Now

Job Description

Application Security Engineer role with Wolfe, LLC in Pittsburgh, PA, onsite five days per week.

Responsibilities

Conduct code reviews, SAST/DAST testing, basic penetration testing, and lightweight threat modeling, collaborating with developers to remediate vulnerabilities across application code, libraries, containers, and infrastructure as code.
Integrate and operate automated security tooling (for example Snyk, SemGrep, Cycode) within CI/CD pipelines across code repositories such as GitHub, GitLab, Jenkins, and AWS DevOps, and assist with triage and reporting of findings.
Oversee vulnerability management programs, scanning tools, and the enterprise Bug Bounty program, tracking and prioritizing remediation against defined SLAs.
Support Bot Management, Web Application Firewall, secrets management, and API security controls across Wolfe's applications.
Promote secure coding standards aligned with OWASP and SANS CWE Top 25, and contribute to measuring DevSecOps maturity using DSOMM or BSIMM.
Collaborate with developers, security operations, product management, and incident response teams, sharing secure-coding and vulnerability-management practices while expanding personal expertise.

Requirements

Minimum 2 years of experience in application security, DevSecOps, or security-exposed software development, including developers transitioning into security roles; Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related field (equivalent experience accepted).
Strong coding background with working knowledge of secure coding principles (OWASP Top 10, SANS CWE Top 25).
Hands-on exposure to CI/CD pipelines (GitHub, GitLab, Jenkins, AWS DevOps) and interest in embedding security tooling into those workflows.
Excellent verbal and written communication skills, capable of explaining security concepts to technical and non-technical teammates.
Willingness to learn enterprise security tooling (vulnerability scanners, Bot Management, SAST/DAST/SCA) and maturity frameworks such as DSOMM or BSIMM; prior experience is a plus but not required.
No mandatory certifications; familiarity with CISSP, OSCP, GCSA, AWS Security Specialty, or CSSLP is a plus, and Wolfe will support pursuing them.

Technologies

Snyk
SemGrep
Cycode
GitHub
GitLab
Jenkins
AWS DevOps
DSOMM
BSIMM
OWASP Top 10
SANS CWE Top 25
SAST
DAST
SCA
Bot Management
WAF

Benefits

Restricted Stock Units (RSUs)
Profit Share and/or Incentive Bonus
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of the premium)
Short-Term Disability Insurance (Wolfe pays 100% of the premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable donation to a charity of your choice yearly
Employee referral bonus
Tuition reimbursement
Internal training and information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club

Impact Statement

Update the existing Application Security Strategy and improve monitoring and KPI reporting
Deliver a significant improvement to at least one automated security tool in the production CI/CD pipeline and establish a documented triage workflow
Drive additional Bug Bounty submissions and strengthen bot management protections before the end of Q3
Provide product and technology advisement and testing for new application and AI functionality
Develop and plan a targeted Application and AI development training program

View full job page →

19d ago

Software Engineer: Full-Stack Web Developer

Nanobiosym Cambridge, MA

Cambridge, MA

19d ago

$110k+/yr Full time Backend Developer Python API

Apply Now

Job Description

Nanobiosym, a dynamic digital health company based in Cambridge, MA, is expanding its on-site technology team with a senior full-stack developer. The role centers on architecting and delivering secure, scalable web and e-commerce platforms, with a strong emphasis on AWS cloud solutions and close collaboration with executive leadership to align technology with business goals.

Responsibilities

Design and implement an integrated web footprint that covers the corporate site and the e-commerce storefront, ensuring responsive behavior across desktops, tablets, and mobile devices.
Create, build, and deploy end-to-end web and e-commerce solutions that adapt seamlessly to desktop and mobile environments.
Develop and refine AWS-driven cloud infrastructure using EC2, S3, Lambda, and RDS to achieve high availability, scalability, and cost efficiency.
Enforce top-tier security practices including SSL/TLS, OAuth2, and encryption, while maintaining GDPR, HIPAA, and related compliance requirements.
Utilize modular frameworks such as React, Node.js, and Python/Django to support rapid scalability and evolving business needs.
Work in close partnership with the CEO to align technical execution with strategic business goals, presenting progress in accessible language.
Create UI/UX designs that reinforce the brand and deliver coherent, user-focused interfaces.
Build analytics dashboards using Tableau or Power BI to monitor user behavior, sales trends, and system performance.
Implement robust security controls and maintain alignment with industry standards.
Continuously assess and adopt emerging technologies to keep the digital presence future-ready.

Requirements

More than five years of full-stack web development experience.
Proficiency in HTML5 and CSS3, with expertise in a JavaScript framework (React, Angular, or Vue) and strong responsive design.
Experience with server-side languages such as Node.js and Python, including building and managing RESTful APIs.
Deep knowledge of SQL and relational databases (PostgreSQL, MySQL, AWS RDS) as well as NoSQL options (MongoDB, DynamoDB, DocumentDB), with experience optimizing complex queries.
Advanced expertise in AWS services, cloud architecture, and administration.
Hands-on experience deploying on AWS, serverless architecture, version control, and DevOps tools including CI/CD pipelines, Docker, and Git.
Knowledge of OWASP standards, security testing, and secure authentication workflows including user authentication and authorization.
Strong understanding of web security best practices and their implementation.
Excellent communication and problem-solving skills with the ability to devise and present roadmaps to non-technical stakeholders.
Experience building e-commerce platforms and integrating payment gateways.
Strong problem-solving abilities and meticulous attention to detail.

Technologies

HTML5
CSS3
JavaScript
React
Angular
Vue
Node.js
Python
Django
Tableau
Power BI
PostgreSQL
MySQL
AWS
EC2
S3
Lambda
RDS
MongoDB
DynamoDB
DocumentDB
RESTful APIs
Docker
Git
CI/CD
Serverless
SSL/TLS
OAuth2
OWASP

Benefits

Contribute to the core digital infrastructure of a rapidly expanding diagnostics leader.
Ongoing learning opportunities in emerging technologies such as AI/ML and edge computing.
Direct collaboration with the executive leadership team.
Competitive compensation and benefits package.
Support for professional development and ongoing education.

Company Overview

We are a dynamic, growing digital health company focused on revolutionizing healthcare through innovative technology. As we expand our digital presence, we seek a talented Full-Stack Web Developer to lead our e-commerce and outreach initiatives. The ideal candidate will be a proactive self-starter with a proven track record of building secure, scalable, and user-friendly web applications that align with brand strategy and business objectives.

Preferred Qualifications

Branding experience is preferred.
Portfolio demonstrating UI/UX projects aligned with brand strategy is preferred.
Familiarity with Python for data analysis and AI/ML integration in web applications.
AWS Certified Developer, AWS Solutions Architect, or equivalent credentials.

What We Offer

Shape the core digital infrastructure of a rapidly growing diagnostics leader.
Continuous learning opportunities in emerging tech (AI/ML, edge computing).
Direct collaboration with executive leadership.
Competitive salary and benefits package.
Professional development and learning opportunities.

View full job page →

Owasp Engineer Jobs

Application Security Engineer

Software Engineer: Full-Stack Web Developer

Get Owasp Engineer Jobs alerts