Application Security Engineer

Summary

Join G-P, a company with a mission to break down barriers to global business, and become an Application Security Engineer. You will support the implementation of G-P’s application security program, assessing web technologies and coordinating remediation efforts. This role involves threat modeling, vulnerability management, penetration testing, and developing automation tools. The ideal candidate possesses a BS in Computer Science or equivalent experience, 3+ years in application security, excellent communication skills, and proficiency in coding languages. G-P offers a competitive compensation and benefits package, including a base salary range of $110,400 to $138,000 and an annual bonus. The company fosters a remote-first, diverse, and inclusive work environment.

Requirements

• Education: BS (or higher) in Computer Science or related field, or equivalent work experience
• Experience: 3+ years of experience in application security with any combination of the following: threat modeling experience, secure design reviews, code reviews, pen-testing
• Excellent communication skills and business acumen
• Proficiency in coding/scripting languages (e.g., Python, Go etc.)
• Web application penetration testing experience (CTFs, Bug Bounty, etc)
• Amazon Web Services (AWS) security and engineering knowledge and/or experience
• Experience with developing or testing web application technologies

Responsibilities

• Participate in threat modeling exercises with engineering team members
• Triage SCA/SAST/DAST/CSPM findings by eliminating false positives and providing well-vetted vulnerabilities to engineering teams
• Support vulnerability management efforts for networks and infrastructure
• Partner with engineering teams ensuring timely remediation of security findings
• Perform security assessments, reviews, and internal penetration tests
• Support application security programs and security team initiatives
• Develop scripts and tools to automate repetitive security tasks, such as log analysis, patch management, and incident detection
• Build custom solutions to integrate security tools with existing systems using languages like Python, JavaScript, or Go

Preferred Qualifications

• Nice to have security certifications (OSCP, OSWP, eCPPT, eWPT, Security+, etc)
• Experience with Linux, Docker, Terraform, and programming against REST APIs

Benefits

• The annual gross base salary range for this position is $110,400 to $138,000
• This position is also eligible for an annual bonus dependent on various factors, including and without limitation, individual and company performance in addition to base salary