Full-Time
Application Security Engineer
Updated on 9/3/2026
Jobsbridge
No salary listed
Torrance, CA, USA
In Person
Category
 Cybersecurity (1) |
|---|
Required Skills
TCP/IP
Bash
PHP
Agile
Python
JavaScript
MySQL
Node.js
Ruby
Microsoft Windows
Threat modeling
SQL
Java
.NET
C#
Perl
Scala
Cryptography
AJAX
REST APIs
Penetration Testing
C/C++
Linux/Unix
HTML/CSS
Requirements
- At least 5 years of relevant experience.
- Experience writing and reviewing code in several of PHP, MySQL, AJAX, Java, Python, HTML/JavaScript, Perl, Scala, Node.js, Ruby, C++, C#, SQL, Delphi, and .NET.
- Experience with Unix or Windows shell scripting.
- Experience with black-box security testing, vulnerability scanning, penetration testing, security code review, Static Analysis Security Testing, Dynamic Application Security Testing, mobile application security, and threat or attack modeling.
- Strong knowledge of secure development practices.
- Deep knowledge of common web application vulnerabilities, including cross-site scripting, cross-site request forgery, and clickjacking, and their mitigation strategies.
- Knowledge of system security vulnerabilities and remediation techniques.
- Knowledge of network and web protocols, including TCP/IP, UDP, IPsec, HTTP, HTTPS, and routing protocols.
- Knowledge of security across data, database, and operating-system disciplines.
- Strong understanding of threat modeling and security methodologies.
- Familiarity with protocol analysis methods and cryptography.
- Excellent English communication skills.
- Ability to interact professionally with senior leadership and articulate key messages to technical and non-technical audiences.
- Strong background in fundamental information security concepts.
- Strong analytical skills.
Desired Qualifications
- 8 or more years of relevant experience.
- Strong HTML/XHTML, JavaScript, and CSS skills.
- Experience developing in an Agile methodology.
- Solid administrative experience in both Unix and Windows environments.
- Experience with web application firewalls.
- Experience with intrusion detection system and intrusion prevention system signature development.
- Experience with crawlers, parsers, and web services.
- Experience in a highly technical hands-on environment.