Senior Application Security Engineer

5+ years in Application Security, Pentesting, or Security Engineering Expert knowledge of the OWASP Top 10 and common web attack vectors Experience with testing AI/LLM applications and understanding OWASP LLM Top 10 vulnerabilities Proficiency in reading and auditing Node.js code Ability to write automation scripts in Python Experience with Burp Suite Professional, OWASP ZAP, and commercial SAST/DAST/SCA platforms Excellent communication skills

Perform deep-dive manual penetration testing and security assessments Triage and manage results from SAST, DAST, and SCA tools Conduct thorough security code reviews of Node.js applications Develop Python scripts to automate repetitive security tasks Act as a security consultant for developers, tracking vulnerabilities from discovery through to remediation Stay current with the OWASP Top 10 and other industry frameworks