Web Application Security Engineer

Position Overview

We are seeking an experienced Web Application Security Engineer to join our team in a unique purple team capacity. This role represents a strategic blend of offensive penetration testing expertise and defensive blue team capabilities, with a specialized focus on securing our web applications and SD‑WAN network infrastructure. The successful candidate will be responsible for conducting comprehensive security assessments of our web applications while simultaneously strengthening our defensive posture across our complex proxy and reverse proxy architecture.

This position is ideal for a security professional who thrives at the intersection of offensive and defensive security, possesses deep technical knowledge of web application vulnerabilities, and understands the nuances of securing modern SD‑WAN environments. You will work collaboratively with development teams, network engineers, and operations staff to identify vulnerabilities, validate security controls, and drive continuous improvement in our security posture.

Core Responsibilities

• Offensive Security (Penetration Testing)

Conduct thorough and methodical penetration tests against web applications, APIs, and network infrastructure.

Monitor security events and analyze logs from WAF and proxy infrastructure.

Bridge offensive and defensive functions by designing and executing purple team exercises.

Develop automation scripts and tools to streamline repetitive security tasks (vulnerability scanning, configuration auditing, report generation).

Required Qualifications

Preferred Qualifications

Benefits

Additional Information

Seniority level : Mid‑Senior level

Employment type : Full‑time

Job function : Information Technology

Industries : IT Services and IT Consulting

#J-18808-Ljbffr