Read first: if you're interested in this role it's extremely easy to get us to call you; gear your resume towards application security experience and specific penetration testing tools/tactics that you've used. Thanks! Job Description A major world news organization is looking for a fully remote Senior Application Security Engineer to join their appsec team. The team has 3 other security engineers, and you'll be working closely with the development team to implement security measures into all software development processes. The role also has a special focus on penetration testing of web applications, because that skillset is currently a hole that the team needs to fill. You will report directly to the CISO, who is looking to eventually promote his engineers to manager or director level positions as the team grows. Required Skills & Experience At least one year of professional experience penetration testing web applications Familiarity with static and dynamic analysis tools like Checkmarx, Fortify, etc Ability to do manual secure code reviews Collaborative attitude, with an interest in helping train newer engineers. Interest in future leadership is also a plus but not at all a necessity. You Will Receive the Following Benefits: 401(k) with 5% matching Unlimited PTO Medical, Dental, Vision insurance Paid professional development Flexible hours A ton of others