Y

Senior Application Security Engineer - Penetration Testing, Mobile & API Security

york solutions, llc • United State
Remote
Apply
AI Summary

Lead application security testing in large enterprise environments, conducting end-to-end penetration tests and vulnerability assessments. Execute comprehensive security evaluations of web applications, APIs, and mobile platforms with actionable remediation guidance. Requires 7+ years of hands-on experience and advanced proficiency in security testing tools and methodologies.

Key Highlights
7+ years of hands-on penetration testing experience in large enterprise environments
End-to-end penetration testing including scoping, exploitation, validation, and reporting
Advanced usage of Burp Suite, Nmap, and common exploitation frameworks required
Key Responsibilities
Execute end-to-end penetration tests including scoping, exploitation, validation, and reporting
Identify and document web application vulnerabilities such as OWASP Top 10, authentication/authorization flaws, and injection attacks
Partner with engineering teams to validate and remediate vulnerabilities
Write scripts or automations in Python or Go to support testing workflows
Test mobile applications, hardware/embedded systems, or third-party/vendor platforms
Technical Skills Required
Penetration Testing Burp Suite Python OWASP Top 10
Benefits & Perks
BCBS Medical with 3 Plans to choose from
Delta Dental plan with 2 free cleanings
John Hancock 401(k) Retirement Plan with discretionary company match
Nice to Have
Testing mobile applications
Hardware/embedded systems testing
Third-party/vendor platform testing
PCI-related penetration testing requirements
Bug bounty program support
Threat modeling experience

Job Description


Senior Application Security Engineer - Application Penetration Testing, Mobile Application Penetration Testing, Vulnerabilities, and API in large enterprise environment.

100% Remote

Contract

Pay Range - $65 - $85/HR


Required Skills

  • 7+ years of hands-on penetration testing experience, focused on web applications and APIs in large enterprise environments
  • Demonstrated experience executing end-to-end penetration tests (scoping, exploitation, validation, reporting)
  • Strong working knowledge of web application vulnerabilities (e.g., OWASP Top 10, authentication/authorization flaws, injection attacks)
  • Proficiency with core security testing tools, including Burp Suite (advanced usage required), Nmap, and common exploitation frameworks
  • Experience writing scripts or automations in Python or Go to support testing workflows
  • Ability to clearly document findings with actionable remediation guidance for engineering teams
  • Experience partnering with engineering teams to validate and remediate vulnerabilities

Strongly Preferred

  • Experience testing mobile applications, hardware/embedded systems, or third-party/vendor platforms
  • Familiarity with PCI-related penetration testing requirements and compliance contexts
  • Experience contributing to or supporting bug bounty programs (triage, validation, escalation)
  • Exposure to threat modeling and ability to identify risk areas pre-deployment

Relevant certifications such as OSCP, OSCE, OSWE, or CISSP


Benefits:

York Solutions Offers a generous benefits package for eligible full-time employees:

  • BCBS Medical with 3 Plans to choose from (PPO and High deductible PPO plans with Health Savings Program)
  • Delta Dental plan with 2 free cleanings and insurance discounts
  • Eye Med Vision with annual check-ups and discounts on lens
  • Life and Accidental Death Insurance paid by company
  • John Hancock 401(k) Retirement Plan with discretionary company match
  • Voluntary Insurance programs such as: Hospital Indemnity, Identity Protection, Legal Insurance, Long Term Care, and Pet Insurance.
  • Flexible work environment with some remote working opportunities
  • Strong fun and teamwork environment
  • Learning, development, and career growth


Similar Jobs

Explore other opportunities that match your interests

Information Security Analyst

Cyber Security
•
3h ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

TalentFish

United State

Senior Security Engineer, Blue Team

Cyber Security
•
20h ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

Jobgether

United State

AI-focused Data Security & DLP Analyst

Cyber Security
•
1d ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Alignerr

United State

Subscribe our newsletter

New Things Will Always Update Regularly