Security Engineer/Tester

Location: Seattle, WA (onsite 3 days per week). Assignment length: 12+ months. W2 role.

About the role

As a Security Engineer/Tester, you will perform authorized security testing on complex, large‑scale, and critical applications. You will work within the development team to proactively identify security vulnerabilities and act as a liaison between the information security and development teams, assisting in the understanding and resolution of reported security issues.

Responsibilities

• Perform authorized security testing on complex and critical applications.
• Work within the development team to proactively identify security vulnerabilities (OWASP Top 10, SANS Top 25, CWE) early in the development cycle.
• Act as a liaison between the InfoSec and development teams to communicate and facilitate remediation of security issues.
• Present findings to leadership and development teams to inform decisions on mitigations and controls.
• Stay current with the changing threat landscape and new security vulnerabilities.

Required qualifications

• 3+ years of experience in software development or testing with large‑scale enterprise applications.
• Primary skills in manual and automated software testing.
• Deep understanding of web application technologies, web protocols (HTTP, HTTPS), and browser technologies.
• In‑depth domain understanding of application security, including Identity and Access Management (IAM) and various authentication technologies (passwords, biometrics, OTP, digital certificates & PKI, device authentication, FIDO U2F/Passkeys).
• Proven expertise with security testing tools such as Fiddler, Burp, and static code analysis tools.
• Deep understanding of application security vulnerabilities like OWASP Top 10, SANS Top 25, and CWE.
• Bachelor’s degree in Computer Science or equivalent experience.

Preferred qualifications

• Experience with security technologies and standards such as Single Sign‑On (SSO) using SAML/OpenID and OAuth protocols.
• Good understanding of cryptographic algorithms and standards (symmetric/asymmetric crypto, digital signatures, JWS/JWE tokens, HSMs).
• Understanding of security vulnerabilities related to cloud environments.
• Familiarity with mobile application security.
• Knowledge of threat modeling concepts and the Secure Development Life Cycle.
• Recognized security certifications are an advantage.

Pay

$63 – $65 per hour (W2).

Schedule

On‑site three days per week; the remainder may be remote. Assignment length is 12+ months.

Benefits

• Medical, dental, vision, life, disability, and other supplemental insurance plans.
• Employee Stock Purchase Program (ESPP) and 401(k) with company match after 12 months.
• Health Savings Account (HSA) on HDHP plan.
• SupportLinc Employee Assistance Program (up to 8 free counseling sessions).
• Corporate discount savings program and other discounts.
• On‑demand training, certification prep, and a library of technical and leadership courses after 6 months of tenure.
• Certification discounts and perks for associations such as CompTIA and IIBA.
• Access to a dedicated customer service team and a certified Career Coach.