Application Security Engineer - Penetration Testing Quality Assurance
Core
Quality-assurance point for penetration testing deliverables across applications and APIs, ensuring reports are technically accurate, reproducible, and risk-based before release.
Role type
Senior IC application security engineer (penetration testing QA)
Builds
Penetration test reports, remediation guidance, and quality metrics for application and API security teams.
Domain
Cybersecurity, Application Security, Penetration Testing
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Penetration testing review, vulnerability validation, risk rating calibration (CVSS), web/API security, Burp Suite, Snyk, vulnerability management lifecycle, technical writing, stakeholder communication
Preferred skills
Third-party test review, regulated industry experience (financial/insurance), OWASP/NIST standards, issue-tracking platforms, Python/PowerShell scripting, security certifications (OSCP, OSWE, etc.)
Technologies
Burp Suite, Snyk, Python, PowerShell, Unix shell, VBA
Responsibilities
Review and validate penetration test reports for accuracy and scope; Calibrate severity ratings using CVSS and business impact; Provide remediation guidance and coordinate retesting; Maintain quality standards and reporting templates; Track open findings and closure decisions; Triage emerging vulnerabilities.
Seniority
Senior, hands-on IC
