Senior Product Security Engineer - Application Security
Job Description
About the Job
\n
Title: Senior Product Security Engineer – Application Security
\n
Location: Greater Lowell Area, MA or Sunrise, FL (Hybrid – 3 Days Onsite)
\n
Employment Type: Contract (6 Months)
\n
Status: Accepting Candidates
\n
About the Role
\n
We are looking for an experienced Product Security Engineer to strengthen application security across enterprise technology environments. This individual will perform application security reviews, vulnerability assessments, penetration testing, and security risk evaluations for web applications, APIs, and cloud-based platforms.
\n
The ideal candidate will bring strong technical expertise in application security testing, secure development practices, cloud security, and vulnerability remediation. Experience supporting cybersecurity due diligence and technology integration initiatives is highly desirable.
\n
Key Responsibilities
\n
- \n
- Assess enterprise applications, web platforms, APIs, and cloud-hosted solutions to identify security gaps and vulnerabilities.
- Perform application security testing using SAST, DAST, SCA, and manual penetration testing methodologies.
- Utilize security tools such as Burp Suite, Veracode, Checkmarx, Snyk, Fortify, or similar platforms.
- Evaluate API security, authentication mechanisms, access controls, and application architecture.
- Review secure software development practices, DevSecOps processes, and CI/CD security controls.
- Assess application security within AWS, Azure, and other cloud environments.
- Work closely with development and engineering teams to validate findings and implement remediation strategies.
- Support cybersecurity risk assessments, technology due diligence, and post-acquisition security integration activities.
- Prepare technical assessment reports, document findings, and communicate security risks to stakeholders.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Required Qualifications
\n
- \n
- 7+ years of cybersecurity experience, including substantial hands-on application security experience.
- Strong understanding of OWASP Top 10, OWASP API Security Top 10, and common application vulnerabilities.
- Practical experience with SAST, DAST, SCA, vulnerability assessments, and application penetration testing.
- Experience with tools such as Burp Suite, Checkmarx, Veracode, Snyk, Fortify, or SonarQube.
- Strong knowledge of REST APIs, microservices, authentication, authorization, and encryption.
- Experience securing cloud-based applications in AWS, Azure, or similar environments.
- Understanding of SSDLC, DevSecOps, and secure application architecture.
- Strong communication, documentation, and stakeholder management skills.
\n
\n
\n
\n
\n
\n
\n
\n
\n
Preferred Qualifications
\n
- \n
- Experience with cybersecurity due diligence, M&A security assessments, or post-acquisition integration.
- Knowledge of application threat modeling and security architecture reviews.
- Familiarity with NIST, ISO 27001, OWASP ASVS, or related security frameworks.
- Relevant certifications such as CISSP, CSSLP, OSWE, or GWAPT.
\n
\n
\n
\n
\n
Compensation (MA Pay Transparency)
\n
- \n
- Estimated hourly range: $70–$80/hr (W-2).
- Final compensation will depend on relevant experience, technical expertise, and interview results.
\n
\n
\n