Application Security Engineer

About This Opportunity

We are representing a confidential virtualization and enterprise computing client in their search for an Application Security Engineer. This is a remote position based in the United States, offering the opportunity to make security decisions that impact millions of users while gaining hands-on experience in exploit development and CVE discovery.

In this role, you will combine an attacker mindset with the detail-oriented attitude required to coordinate fixes and security architecture with engineering teams. You will work alongside senior security professionals to write exploits, design fixes for application vulnerabilities, and search for critical/high-risk vulnerabilities in enterprise codebases.

Responsibilities

• Reproduce and triage incoming vulnerabilities from security automation and bug bounty programs, then propose granular fixes to engineering teams
• Discover vulnerabilities and construct exploits for core enterprise applications
• Assist in the CVE disclosure process and coordinate vulnerability communications
• Provide threat models and design reviews for teams throughout the organization
• Assist in tuning existing static analysis, dynamic analysis, and dependency management tools
• Communicate with technical and leadership teams to ensure focus on risk mitigation while allowing for business continuity
• Help implement repeatable secure development practices across the organization

What We're Looking For

Required Skills and Experience:

• An attacker mindset with the ability to demonstrate proof-of-concept exploits before fixes are implemented
• Eagerness to learn new offensive security techniques on the job
• Clear communication skills with the ability to acknowledge mistakes and disagree constructively when necessary
• Demonstrable passion for offensive security
• Experience reading, writing, and debugging C++ and Python code
• Basic experience with memory exploitation techniques
• Demonstrable experience with web exploitation techniques and tools (e.g., PortSwigger lab scoreboards)
• Excellent written and oral communication skills

Ideal Qualifications:

• BSc/MS in computer science or a related field
• Previous CVEs in desktop applications
• Proficiency with reverse engineering tools
• Significant experience in memory exploitation techniques (e.g., gaining code execution from memory vulnerabilities in modern operating systems)
• Familiarity with cloud security best practices
• 3+ years of industry experience in application security
• Offensive security certifications such as OSCP, OSWE, OSED, or RET2

How We Work with You

Our talent team at Get A Job.ai partners with leading technology companies to identify exceptional security professionals. When you apply through our platform, a dedicated recruiter will screen your qualifications and coordinate your submission to our client. We handle the introduction and facilitate the interview process. Please do not contact the client directly—all communication should flow through Get A Job.ai to ensure the best candidate experience.

Pay

Compensation details will be discussed during the screening process and vary based on experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive, barrier-free recruitment. We provide equal employment opportunities to all qualified applicants without regard to race, color, age, religion, national origin, sex, sexual orientation, marital status, disability, veteran status, or any other protected characteristic.