Description

Role Overview We are seeking a high-caliber Application Security Engineer to join our team in Phoenix. This is a mission-critical role that sits at the intersection of software engineering and offensive security. You will be responsible for designing, implementing, and validating security controls across our enterprise applications and services.
The ideal candidate is a "Security-Minded Developer"—someone who can write production-grade code in Go, Java, or Python, but also possesses the hands-on "hacker" mindset to break applications using industry-standard penetration testing tools.
Key Responsibilities

• Secure Development: Design and implement secure application features using Go, Java, Python, or C#.
• Offensive Testing: Perform deep-dive penetration testing on web applications and APIs using Burp Suite, Kali Linux, and Metasploit.
• Vulnerability Management: Identify and prioritize vulnerabilities; work directly with engineering teams to define remediation paths and reproduce issues.
• DevSecOps Integration: Integrate automated security scanning and security gates into modern CI/CD pipelines.
• Architecture Review: Partner with developers to review code and architectures for security weaknesses, recommending secure-by-design patterns.

Required Skills & Experience

• Programming: Strong proficiency in at least one of the following: Go, Java, Python, or C#.
• Security Tooling: Hands-on experience with Burp Suite, Kali Linux, Nmap, Sqlmap, and Metasploit.
• Modern Infrastructure: Experience with Docker and containerized environments.
• CI/CD: Practical experience integrating security testing into Git-based source control and automated pipelines.
• Education: Bachelor’s degree in Computer Science, IT, or a related field.
• Preferred Certifications Highly desirable certifications include: OSWE, GPEN, GWAT, GXPN, CEH, or CSSLP

Key Skills

Education

Any Graduate