\n\n\n\n\n\n\n\n\n\n\nRoles and Responsibilities:\nโข Run client SAST/DAST/SCA tools, review outputs and provide recommendations\nโข Implement integrations for tools into pipelines, ticketing systems, etc.\n \nExperience Requirements:\nโข 2-3 years experience working in Application Security\nโข Understanding of Integrated Development Environment (IDE) and Continuous integration / Continuous Delivery (CI/CD) Pipeline tools and processes (e.g. Azuer Dev Ops, Jenkins, Bamboo, etc.)\nโข Strong working knowledge of Secure Development Lifecycles and experience remediating technical vulnerabilities identified by web application scanning tools, Information Systems architecture, security control design, and development experience\nโข Deep knowledge of manual testing tools such as Burp Suite Pro\nโข Knowledge of and experience with SAST/DAST/SCA Application Security tools such as: Burp Suite, Netsparker, Veracode, Checkmarx, WhiteSource, etc.\nโข Experience with the integration of tools into development pipelines\nโข Understanding of a broad range of Application Security issues as well as their mitigation strategies\nโข Understanding of Application Security related vulnerabilities\nโข Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C# a plus\nโข Written communication skills for written interactions with clients\nโข Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into digestible pieces of information\nโข Personal drive and passion to not only continue growing yourself but also the Application Security Engineering practice\nโข Bachelor's degree in Computer Science or Information Security preferred\nโข Standard industry certifications are preferred\n\n\n\n\n\n\n\n \n\n\n\n \n\n#Salary and compensation\n
No salary data published by company so we estimated salary based on similar jobs related to InfoSec and Engineer jobs that are similar:\n\n
$55,000 — $155,000/year\n
\n\n#Benefits\n
๐ฐ 401(k)\n\n๐ Distributed team\n\nโฐ Async\n\n๐ค Vision insurance\n\n๐ฆท Dental insurance\n\n๐ Medical insurance\n\n๐ Unlimited vacation\n\n๐ Paid time off\n\n๐ 4 day workweek\n\n๐ฐ 401k matching\n\n๐ Company retreats\n\n๐ฌ Coworking budget\n\n๐ Learning budget\n\n๐ช Free gym membership\n\n๐ง Mental wellness budget\n\n๐ฅ Home office budget\n\n๐ฅง Pay in crypto\n\n๐ฅธ Pseudonymous\n\n๐ฐ Profit sharing\n\n๐ฐ Equity compensation\n\nโฌ๏ธ No whiteboard interview\n\n๐ No monitoring system\n\n๐ซ No politics at work\n\n๐ We hire old (and young)\n\n
\n\n#Location\nChicago, Illinois, United States
๐ Please reference you found the job on Remote OK, this helps us get more companies to post here, thanks!
When applying for jobs, you should NEVER have to pay to apply. You should also NEVER have to pay to buy equipment which they then pay you back for later. Also never pay for trainings you have to do. Those are scams! NEVER PAY FOR ANYTHING! Posts that link to pages with "how to work online" are also scams. Don't use them or pay for them. Also always verify you're actually talking to the company in the job post and not an imposter. A good idea is to check the domain name for the site/email and see if it's the actual company's main domain name. Scams in remote work are rampant, be careful! Read more to avoid scams. When clicking on the button to apply above, you will leave Remote OK and go to the job application page for that company outside this site. Remote OK accepts no liability or responsibility as a consequence of any reliance upon information on there (external sites) or here.