Senior Application Security Engineer (US Remote)

First Advantage • Atlanta, GA

4d • $130,000 - $150,000 • Remote

About The Position

At First Advantage (Nasdaq: FA), people are at the heart of everything we do. From our customers and partners to our greatest advantage — our team members. Operating with empathy and compassion, First Advantage fosters a global inclusive workforce devoted to the diverse voices that make up our talent and products. Our team members empower each other to be their authentic selves and treat all with respect, integrity, and fairness.

Say hello to a rewarding career, and come join a leading provider of mission-critical background screening solutions to some of the most recognized Fortune 100 and Global 500 brands.

We are searching for a Senior AppSec Engineer. This is an individual contributor role. The person in this role will drive security assessments of many different First Advantage applications and will provide consistent enhancements to reduce risk across the business.

Requirements

• 3-5 years of experience with some combination of application security engineering, penetration testing, web application/API development (.NET/C#, Java, JavaScript), system administration, networking, and information security.
• Relevant industry certifications from organizations such as OffSec (OSWE, OSWA, OSCP), SANS, or isc2.
• Familiarity with web application/API testing using tools such as Burp Suite and Postman.
• Familiarity with static code analysis tools such as SonarQube & GitHub Advanced Security.
• Familiarity with web application/API vulnerability scanners such as Qualys TAS, Invicti, & PortSwigger.

Responsibilities

• Develop application security strategies across the global enterprise.
• Design and implement secure application code bases to consistently enhance the software development life cycle (SDLC) process.
• Conduct thorough security assessments, including static and dynamic application security testing (SAST/DAST), threat modeling, web/mobile application & API penetration testing, and application design reviews. Collaborate with teams to remediate identified issues.
• Contribute to the development and automation of security testing tools and processes.
• Assist with incident response (IR) activities that may relate to application security.
• Partner with teams such as security operations, DevOps, networking, and product teams to ensure a strong security posture across the organization.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees