Security Testing Tools

Security Testing Tools Engineer Jobs

2 jobs found

Today

Application Security Engineer

Veilant Tysons, VA

Tysons, VA

Today

$115k - $145k/yr Full time Application Security Code Security Cybersecurity Tools

Apply Now

Job Description

Veilant is hiring an Application Security Engineer in Tysons, VA (onsite) to help validate, secure, and continuously improve software delivered by internal and partner engineering teams. In this role, you will work close to development teams while strengthening security through release reviews, threat modeling, secure coding feedback, and DevSecOps tooling improvements. The position offers a salary range of $115,000 to $145,000 annually, plus a benefits package designed to support your health, learning, and day-to-day comfort.

Why you’ll like working here

Flexible PTO + holidays
401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions
Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
Employer contribution to HSA
Learning & Development opportunities
Professional coaching services
Get the technology you want to do your job
Free daily snacks & drinks

Responsibilities

Audit major and minor software release cycles to intercept and remediate security flaws before deployment
Review source code to identify, isolate, validate, and contextualize vulnerabilities in complex application codebases
Build safe proof-of-concept examples to demonstrate exploitation paths and verify real-world impact
Contextualize findings using application business logic, user workflows, data sensitivity, and production use cases
Author clear remediation guidance and partner with development teams to implement patches, controls, or architectural mitigations
Intercept and analyze application-layer network traffic using tools such as Burp Suite or similar intercepting proxies
Assess and help secure core architectures across REST APIs, SQL databases, PostgreSQL, JWT/OAuth, identity providers, and token-based authentication mechanisms
Perform threat modeling for web applications based on use cases, data flows, user roles, trust boundaries, and production environments
Improve DevSecOps pipelines by integrating, tuning, and operationalizing SAST, DAST, SCA, IaC scanning, secrets detection, and container security tooling
Support container runtime security using monitoring and runtime protection tools such as Falco, NeuVector, or similar technologies
Create standardized security reporting that translates technical findings into clear risk narratives for both engineering teams and executive stakeholders
Build and maintain a repeatable AppSec review process for major and minor software releases
Integrate and improve SAST, DAST, and SCA checks in CI/CD pipelines to make security testing a reliable part of the development lifecycle
Establish threat modeling practices using common frameworks and apply them to Veilant’s Angular front-end, Java Spring Boot back-end, REST APIs, SQL databases, and authentication flows
Improve secure coding practices through feedback, remediation guidance, and collaborative reviews
Implement container runtime security best practices including visibility, monitoring, and runtime protections for containerized workloads
Write standardized security reports that communicate risk, impact, and remediation steps for both executive-level stakeholders and engineering teams

Requirements

Ability to obtain a Security Clearance
2+ years of software development experience in Java
Hands-on experience reviewing or securing applications built with Java Spring Boot, Angular, REST APIs, SQL databases, and PostgreSQL
Working knowledge of authentication and authorization technologies including JWT, OAuth, identity providers, Entra, Keycloak, and token-based access models
Experience intercepting, decrypting, manipulating, and analyzing web or application network traffic
Demonstrated ability to find, validate, and explain vulnerabilities in a real codebase
Familiarity with CI/CD tools such as GitLab CI, Azure DevOps, or GitHub Actions
Experience with containerized environments and orchestration tools such as Kubernetes
Exposure to infrastructure-as-code and container scanning tools such as Trivy, Kubesec, or similar technologies
Understanding of cloud hosting environments such as Azure or AWS
Familiarity with secrets management tools such as GitLab Secrets Manager, AWS KMS, Azure Key Vault, or Ansible Vault
Experience with automated application security testing including SAST, DAST, and SCA
Familiarity with runtime security and monitoring tools for containers such as Falco, NeuVector, or similar platforms
Hands-on web security testing experience using Burp Suite or comparable tooling
Strong written communication skills, including the ability to write reports for both technical and non-technical audiences
OSWE, OSCP, and/or GXPN certifications are highly desirable

Physical requirements

Must be able to remain in a stationary position 50% of the time; occasionally move about inside the office
Constantly work with computers and other information technology equipment
Ability to communicate information and ideas in a classroom style format; may stand at a podium for long periods of time

View full job page →

3d ago

Software Engineer II

Mastercard O'Fallon, MO

O'Fallon, MO

3d ago

$92k - $147k/yr Full time Application Security CI/CD DevOps

Apply Now

Job Description

Mastercard is seeking a Software Engineer II in O’Fallon, Missouri to help build and support software that supports critical business capabilities. In this onsite role, you will partner with engineers, product partners, and stakeholders to deliver scalable, secure, high-quality solutions while expanding your technical expertise end-to-end.

What you’ll do

Participate in team prioritization discussions with Product and Business stakeholders to align on requirements and delivery objectives.
Estimate and deliver assigned work across design, development, testing, deployment, configuration, and documentation.
Contribute to code, design, and process discussions, evaluating trade-offs to identify practical solutions.
Join sprint planning, backlog refinement, demos, and acceptance discussions with Product Owners and stakeholders.
Build understanding of end-to-end technical architecture, business domain, and system dependencies for supported applications.
Design, develop, test, and maintain software applications and services with security, scalability, resiliency, and performance in mind.
Participate in code reviews and provide feedback that supports code quality, maintainability, and engineering standards.
Support implementation of engineering best practices, technology standards, and established development frameworks.
Troubleshoot application, system, and production issues by working with team members to identify root causes and implement fixes.
Contribute to CI/CD pipelines, deployment automation, and operational readiness activities.
Support and guide new team members through knowledge sharing and collaboration.
Look for opportunities to improve processes, reduce inefficiencies, and increase team productivity.
Share knowledge, reusable components, patterns, and best practices across teams, guilds, and engineering communities.

What you’ll need

Experience developing software applications using modern programming languages and development frameworks.
Understanding of software design principles, software architecture, data structures, and algorithms with the ability to build maintainable, scalable solutions.
Experience applying secure coding practices and familiarity with industry standards such as OWASP, CWE, and SEI CERT.
Knowledge of vulnerability management and experience using code quality and security scanning tools such as Sonar, Checkmarx, Veracode, Zally, or similar.
Understanding of core engineering principles for mission-critical systems, including security, reliability, scalability, performance, operability, testing, and customer experience.
Experience designing and maintaining unit, functional, integration, and automated tests.
Familiarity with test automation, behavior-driven development (BDD), and test pyramid methodologies.
Experience participating in code reviews and troubleshooting application and production issues in distributed systems.
Ability to collaborate with engineering teams and business stakeholders to estimate requirements and prioritize work by business value.
Understanding of domain-driven design concepts and applying business requirements to software solutions.
Experience with CI/CD pipelines and release automation tools such as Jenkins, Azure DevOps, AWS pipelines, XL Release, or similar.
Familiarity with build, artifact, and dependency management tools such as Artifactory, JFrog, or equivalent platforms.
Experience supporting application monitoring, observability, performance analysis, and operational health using industry-standard tools.
Experience building and supporting highly available production systems.
Preference for experience with cryptography, encryption technologies, or security-focused applications.
Preference for payment industry experience (not required).
Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or a related field, or equivalent practical experience.

Tools and technologies

OWASP, CWE, SEI CERT
Sonar, Checkmarx, Veracode, Zally
Jenkins, Azure DevOps, AWS pipelines, XL Release
Artifactory, JFrog
CI/CD, BDD
Unit testing, functional testing, integration testing

Benefits

Insurance including medical, prescription drug, dental, vision, disability, and life insurance.
Flexible spending account and health savings account.
Paid leaves including 16 weeks of new parent leave and up to 20 days of bereavement leave.
80 hours of Paid Sick and Safe Time.
25 days of vacation time and 5 personal days, pro-rated based on date of hire.
10 annual paid U.S. observed holidays.
401k with a best-in-class company match.
Deferred compensation for eligible roles.
Fitness reimbursement or on-site fitness facilities.
Eligibility for tuition reimbursement.

Corporate security responsibility

Abide by Mastercard’s security policies and practices.
Ensure the confidentiality and integrity of the information being accessed.
Report any suspected information security violation or breach.
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Pay range: O’Fallon, Missouri: $92,000 - $147,000 USD per year.

View full job page →

Security Testing Tools Engineer Jobs

Application Security Engineer

Software Engineer II

Get Security Testing Tools Engineer Jobs alerts