Senior Application Security Engineer
At First Advantage (Nasdaq: FA), people are at the heart of everything we do. From our customers and partners to our greatest advantage — our team members. Operating with empathy and compassion, First Advantage fosters a global inclusive workforce devoted to the diverse voices that make up our talent and products. Our team members empower each other to be their authentic selves and treat all with respect, integrity, and fairness. Say hello to a rewarding career, and come join a leading provider of mission-critical background screening solutions to some of the most recognized Fortune 100 and Global 500 brands. We are searching for a Senior AppSec Engineer. This is an individual contributor role. The person in this role will drive security assessments of many different First Advantage applications and will provide consistent enhancements to reduce risk across the business. What You'll Do:
Develop application security strategies across the global enterprise. Design and implement secure application code bases to consistently enhance the software development life cycle (SDLC) process.
Conduct thorough security assessments, including static and dynamic application security testing (SAST/DAST), threat modeling, web/mobile application & API penetration testing, and application design reviews. Collaborate with teams to remediate identified issues.
Contribute to the development and automation of security testing tools and processes.
Assist with incident response (IR) activities that may relate to application security.
Partner with teams such as security operations, DevOps, networking, and product teams to ensure a strong security posture across the organization.
What You May Need to be Successful:
3-5 years of experience with some combination of application security engineering, penetration testing, web application/API development (.NET/C#, Java, JavaScript), system administration, networking, and information security.
Relevant industry certifications from organizations such as OffSec (OSWE, OSWA, OSCP), SANS, or isc2.
Familiarity with web application/API testing using tools such as Burp Suite and Postman.
Familiarity with static code analysis tools such as SonarQube & GitHub Advanced Security.
Familiarity with web application/API vulnerability scanners such as Qualys TAS, Invicti, & PortSwigger.
Why First Advantage is Your Next Big Career Move First Advantage is going through a technology transformation! We are looking for experts who are excited to work with advanced technologies and provide best-in-class user experiences, drive the development and deployment of scalable solutions, and smoothly guide our agile teams and clients through meaningful changes as we continue to expand our impact. What Are You Waiting For? Apply Today! You have learned a little about us today – we want to learn about you! If you think this position and our company are a great fit for your areas of interest and expertise, tell us about you by applying now! The salary range for this position is approximately $130,000-150,000 base annually. This range reflects our good faith estimate to pay fairly as to what our ideal candidates are likely to expect, and we tailor our offers within the range based on the selected candidate’s experience, industry knowledge, technical and communication skills, and other factors that may prove relevant during the interview process.
United States Equal Opportunity Employment:
First Advantage is proud to be a global leader in removing barriers and supporting our community members to ensure the changing demographics of the workforce are reflected in our hiring and employment practices. We value all of our candidates, employees, and clients, and place great emphasis on hiring and supporting qualified individuals in each role. We are an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, genetic information, or any other area protected by applicable law.
About the job
Apply for this position
Senior Application Security Engineer
At First Advantage (Nasdaq: FA), people are at the heart of everything we do. From our customers and partners to our greatest advantage — our team members. Operating with empathy and compassion, First Advantage fosters a global inclusive workforce devoted to the diverse voices that make up our talent and products. Our team members empower each other to be their authentic selves and treat all with respect, integrity, and fairness. Say hello to a rewarding career, and come join a leading provider of mission-critical background screening solutions to some of the most recognized Fortune 100 and Global 500 brands. We are searching for a Senior AppSec Engineer. This is an individual contributor role. The person in this role will drive security assessments of many different First Advantage applications and will provide consistent enhancements to reduce risk across the business. What You'll Do:
Develop application security strategies across the global enterprise. Design and implement secure application code bases to consistently enhance the software development life cycle (SDLC) process.
Conduct thorough security assessments, including static and dynamic application security testing (SAST/DAST), threat modeling, web/mobile application & API penetration testing, and application design reviews. Collaborate with teams to remediate identified issues.
Contribute to the development and automation of security testing tools and processes.
Assist with incident response (IR) activities that may relate to application security.
Partner with teams such as security operations, DevOps, networking, and product teams to ensure a strong security posture across the organization.
What You May Need to be Successful:
3-5 years of experience with some combination of application security engineering, penetration testing, web application/API development (.NET/C#, Java, JavaScript), system administration, networking, and information security.
Relevant industry certifications from organizations such as OffSec (OSWE, OSWA, OSCP), SANS, or isc2.
Familiarity with web application/API testing using tools such as Burp Suite and Postman.
Familiarity with static code analysis tools such as SonarQube & GitHub Advanced Security.
Familiarity with web application/API vulnerability scanners such as Qualys TAS, Invicti, & PortSwigger.
Why First Advantage is Your Next Big Career Move First Advantage is going through a technology transformation! We are looking for experts who are excited to work with advanced technologies and provide best-in-class user experiences, drive the development and deployment of scalable solutions, and smoothly guide our agile teams and clients through meaningful changes as we continue to expand our impact. What Are You Waiting For? Apply Today! You have learned a little about us today – we want to learn about you! If you think this position and our company are a great fit for your areas of interest and expertise, tell us about you by applying now! The salary range for this position is approximately $130,000-150,000 base annually. This range reflects our good faith estimate to pay fairly as to what our ideal candidates are likely to expect, and we tailor our offers within the range based on the selected candidate’s experience, industry knowledge, technical and communication skills, and other factors that may prove relevant during the interview process.
United States Equal Opportunity Employment:
First Advantage is proud to be a global leader in removing barriers and supporting our community members to ensure the changing demographics of the workforce are reflected in our hiring and employment practices. We value all of our candidates, employees, and clients, and place great emphasis on hiring and supporting qualified individuals in each role. We are an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, genetic information, or any other area protected by applicable law.