Web Application Developer

New

Staff Application Security Engineer

The Application Security Engineer at Sunrun plays a pivotal role in protecting t...

Location

United States

Salary:

150290.60 - 180348.72 USD / Year

Sunrun

Expiration Date

Until further notice

Requirements

7+ years of combined experience in application security and identity & access management (IAM), with a proven track record of supporting application development teams
Deep knowledge of application security principles, secure coding practices, common vulnerabilities (e.g., OWASP Top 10), and zero-trust architecture
Hands-on experience with security testing tools (SAST, DAST), Web Application Firewalls (WAF), and IAM platforms (e.g., Okta, AWS IAM)
Proficiency in programming languages such as Java, Python, or JavaScript
Strong familiarity with cloud environments (AWS, GCP) and their native security and identity controls
Demonstrated expertise in threat modeling and designing defense-in-depth strategies for complex applications
Solid understanding of modern identity standards and technologies, including MFA, SSO, and WebAuthn
Excellent communication and collaboration skills, with the ability to articulate technical findings and security risks to diverse audiences
Strong critical thinking and creative problem-solving skills, with the ability to analyze systems from an attacker's perspective and devise effective countermeasures

Job Responsibility

Threat Modeling & Security Design: Assess potential attack vectors and design defense-in-depth strategies that address gaps across infrastructure, 1st and 3rd party applications, and identity management
Secure Software Development Life Cycle (SSDLC): Partner with application development teams to integrate security into every stage of the development lifecycle. Champion secure coding standards, conduct security code reviews, and provide expert guidance to minimize vulnerabilities before production
Identity & Access Management (IAM): Design, implement, and manage identity security solutions across 1st and 3rd party applications. Showcase hands-on experience in implementing strategies like Zero Trust architecture and modern authentication standards like WebAuthn
Implement & Manage Security Controls: Design, implement, and fine-tune application security controls like SAST/DAST vulnerability scanning andand standardizing secure coding practices. Establish and improve operational processes to ensure their continued effectiveness
Guidance, Training & Compliance: Develop and maintain security policies and standards for both application and identity security. Provide ongoing training to developers to elevate secure coding practices
Stakeholder Collaboration: Use strong critical thinking and communication skills to present complex technical concepts to business stakeholders, gain alignment, and independently drive security initiatives forward

What we offer

Medical/Dental/Vision Insurance
Life Insurance
Disability Insurance
401k Plan + Company Match
Stock Purchase Plan
Paid Vacations/Holidays
Paid Baby Bonding Leave
Employee Discounts
PowerU - 100% Funded Education Programs
Employee Donation Matching

Fulltime

Sr. Principal Web Pentester

Sr. Principal Web Pentester. This role provides advanced offensive cybersecurity...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Ability to take ownership of the technical planning and delivery of penetration testing engagements — from scoping and test plans through exploitation, PoC development, remediation verification, and formal reporting
Proven offensive web/app expertise: Demonstrated experience performing advanced web and API penetration tests, exploiting authentication/authorization flaws, business-logic issues, injection classes, and modern frameworks
Cloud exploitation: Hands-on experience testing and exploiting workloads and configurations in AWS, Azure, and GCP (identity, networking, storage, serverless, IaC)
Server & client platform familiarity: Strong experience with common server and client platforms that host or interact with web apps—Linux and Windows primary
macOS experience is a plus
Programming & automation: Strong scripting and tooling skills using Python, Go, or C/C++ (or equivalent) to automate testing, build proofs-of-concept, and develop internal pentest tools
Infrastructure & evasion: Experience deploying offensive infrastructure for engagements and evading/demonstrating bypasses of network and host-based controls (WAF, IDS/IPS, EDR)
Source code review & SDLC: Experience performing secure code reviews and integrating findings into the SDLC through threat modeling, developer collaboration, and security-by-design recommendations
Experience level & education: Master’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience
Minimum 9+ years in cybersecurity with substantial focus on offensive security and web/cloud testing

Job Responsibility

Web and Application Penetration Testing: Performing advanced assessments of web applications, APIs, and authentication mechanisms to identify and exploit vulnerabilities across modern frameworks and architectures. Delivering actionable findings that directly inform defensive improvements
Cloud Penetration Testing: Conducting offensive security assessments in AWS, Azure, and GCP environments. Testing identity, networking, storage, and serverless components to uncover misconfigurations and privilege escalation opportunities in multi-cloud deployments
Source Code Security Review: Reviewing application and infrastructure-as-code repositories to identify insecure coding patterns, injection points, and logic flaws. Collaborating with development teams to remediate vulnerabilities early in the SDLC
Threat Modeling and SDLC Security: Partnering with engineering and product teams to identify potential attack vectors at the design phase. Performing structured threat modeling to ensure security is embedded throughout the software development lifecycle

What we offer

Health & Wellbeing: comprehensive suite of benefits that supports physical, financial and emotional wellbeing
Personal & Professional Development: specific programs catered to helping you reach any career goals
Unconditional Inclusion: unconditionally inclusive in the way we work and celebrate individual uniqueness

Fulltime

We are seeking an experienced Web Application Developer with at least 5+ years o...

Location

United States , Travis Air Force Base, CA

Salary:

125000.00 USD / Year

Optimized Technical Solutions

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field
Proven experience in full-stack development using C#, .NET, Java, PL/SQL, T-SQL, ASP, XML, HTML5, and VB
Strong experience in database management, including Microsoft SQL Server and Oracle databases
Familiarity with DoD standards, including AFNet, STIG compliance, DIACAP, and RMF
Proficiency in version control systems (Git, SVN) and CI/CD pipelines
Strong knowledge of cybersecurity best practices, particularly in government or military environments
Experience with server configuration and disaster recovery processes
Excellent troubleshooting skills and ability to handle multiple concurrent projects
Experience with AGILE methodologies and Test-Driven Development (TDD)
Security+ (CompTIA) - Required to meet DoD 8570.01-M Information Assurance certification standards

Job Responsibility

Develop, implement, test, and maintain web applications using C#, .NET, Java, PL/SQL, T-SQL, ASP, XML, HTML5, VB, and other modern languages
Perform database administration, ensuring timely backups, recovery processes, and data integrity
Administer and maintain web services on the Air Force Network (AFNet), ensuring adherence to DoD security policies and STIG compliance
Coordinate with stakeholders to design, enhance, and troubleshoot web-based applications, including the integration of legacy systems with newer infrastructure solutions
Implement best practices for cybersecurity, including encryption, authentication, and defense-in-depth security measures
Support disaster recovery and data backup procedures, ensuring daily backups and weekly off-site rotations
Provide customer support and training on developed applications, ensuring seamless user experience and minimal downtime
Maintain compliance with DoD Information Assurance Certification and Accreditation Process (DIACAP) and Risk Management Framework (RMF)

What we offer

Medical, Dental, Vision, Life Insurance, PTO including 11 Federal Holidays, and 401K

Fulltime

GEOINT Software Test Engineer

Reinventing Geospatial (RGi) is a leading expert in geospatial solutions for Def...

Location

United States , Aberdeen Proving Grounds

Salary:

Not provided

Reinventing Geospatial

Expiration Date

Until further notice

Requirements

Active Top Secret clearance with an ability to obtain SCI access and willingness to obtain CI Polygraph
US Citizenship Required
Bachelor’s Degree or equivalent in Computer Science, Information Systems, Engineering, or a related field and 7+ years of overall experience
Five years test and evaluation experience on DoD intelligence or command, control and communications programs/projects
Five years of progressively complex experience in the testing and evaluation of DoD or IC
Experience in the development of test strategies in order to meet release schedules
Experience with developing test scripts and utilizing testing tools
Experience with web applications and associated web testing harnesses
Experience with test methodologies, writing test plans, writing test scripts, creating test cases and debugging
Experience with requirements traceability, system-of-systems integration and testing, test planning, development and execution testing

Job Responsibility

Perform software verification and validation, including test planning, development, execution, analysis, and associated documentation
Define and develop test procedures and participate in test driven development activities
Analyze and verify best test solutions and manual test approaches and execute acceptance, integration, installation and system testing
Define, document, analyze, perform, and interpret developmental tests for new and/or modified system components
Documents and analyzes test results, and makes recommendations to improve overall quality
Oversee testing of purchased third-party software and/or services to ensure that company standards and end-user requirements are met
Participate in User Acceptance Testing (UAT), Unit Testing (UT), and Integration Testing (IT), Regression Testing (RT), Detailed Testing (DT), Operational Testing (OT), and Acceptance testing (AT)
Perform test activities in a program consisting of waterfall and agile methodologies
Document and manage defect identification through resolution and closure
Ensure that hardware/software under test implements the functionality specified in all approved requirement documents and that it performs as expected from the customers perspective

What we offer

100% paid employee healthcare & dental insurance
Paid parental leave
401k with matching
Escalating vacation time
Referral bonuses
Tuition reimbursement
Professional development training
Free beverages and snacks
Weekly catered lunches and breakfast on Fridays

Fulltime

New