Java Security Testing Engineer

OpenkyberTX, United States

job_description.job_card.1_day_ago

serp_jobs.job_preview.job_type

serp_jobs.job_card.full_time

serp_jobs.filters_job_card.quick_apply

job_description.job_card.job_description

Greetings,

Role : Sr Application Security Engineer

Location : Forth worth, TX (Hybrid Onsite)

Duration : 12+ months

Visa : OPT

Comptia Security + or equivalent, deep understanding of security vulnerabilities in multiple programming languages (e.g., Python, Java, JavaScript, C#), experience developing automation solutions using Python, Java, or PowerShell.

Key Responsibilities

Ability to identify, triage, and remediate issues such as injection flaws, insecure deserialization, and misconfigurations.
Integrate and manage SAST and DAST tools within CI / CD pipelines.
Collaborate with development teams to remediate vulnerabilities and enforce secure coding standards.
Design and implement guardrails for AI-powered applications, mitigating risks like prompt injection, model inversion, and data poisoning.
Develop and maintain security policies, procedures, and documentation.
Conduct security assessments and provide actionable recommendations.
Analyze complex problems and implement effective solutions or workarounds.
Mentor junior engineers and promote security awareness across teams.
Build and maintain CI / CD pipelines using tools like CloudBees, Jenkins, Buddy, UrbanCode, etc.
Develop automation solutions using Python, Java, or PowerShell.
Work with APIs, endpoints, and databases to develop integrated security solutions.
Use IDEs such as Visual Studio, Visual Studio Code, Eclipse for secure development and debugging.
Implement and manage GitHub Advanced Security features including code scanning, secret scanning, and Dependabot alerts.
Apply extensive experience working with DevOps tools such as GitHub, including workflows, actions, and advanced workflow automation.
Understand and remediate security vulnerabilities across multiple programming languages.
Work with Azure Resource Manager (ARM) and scripting tools including PowerShell, Azure CLI, JavaScript, Shell scripts, Python, or similar.
Collaborate within an Agile team environment using Azure DevOps.
Familiarity with OWASP Dependency-Check and similar tools to manage third-party risks.

Required Qualifications

Minimum 8 years of experience in application security or software engineering with a security focus.

Strong programming skills in one or more languages (e.g., Python, Java, JavaScript, C#).

At least 3 years of experience developing automation solutions using Python, Java, or PowerShell.

Preferred Qualifications

Hands-on experience with SAST and DAST tools (e.g., Veracode, GitHub)

Deep understanding of security vulnerabilities in multiple programming languages (e.g., Python, Java, JavaScript, C#).

Solid understanding of OWASP Top 10 and familiarity with SANS Top 25 vulnerabilities.

Experience with AI security concepts and mitigation strategies.

CompTIA Security+ certification or equivalent.

Experience with cloud-native security (AWS, Azure, Google Cloud Platform).

Experience developing solutions that combine data from APIs, endpoints, and databases.

Outstanding communication and strong analytical skills.

Ability to function effectively in a globally diverse work environment.

Clearly communicates risks, solutions, and security posture to technical and non-technical stakeholders.

Experience with GenAI risk mitigation (e.g., prompt injection, data leakage).

Knowledge of container security and infrastructure-as-code scanning.

Certifications such as CISSP, OSCP, or GIAC are a plus.

Thanks& Regards,

K Hemanth Kumar | Sr IT Technical Recruiter | Kairos Technologies Inc

serp_jobs.job_alerts.create_a_job

Security Engineer • TX, United States

Job_description.internal_linking.related_jobs

serp_jobs.job_card.promoted