623 dast jobs at 446 companies in United States

2mo
Save
Mark Applied
Hide
Manager, Software Engineering (AppSec/ DAST) (52019)
United States
$143k-$215k/yr HybridFull Time
OpenText
OpenTextNASDAQ: OTEX: Develops software for enterprise information management and digital transformation.
5+ YOE1+ Mgmt5+ years software engineering; 1–2+ years in technical leadership; experience with web tech, DAST, and Agile; proficient in at least one modern language (.NET, HTML/CSS/JS).
.NET, HTML, CSS, JavaScript, APIs, Docker, Kubernetes, AWS, Azure, GCP, DAST
2mo
Save
Mark Applied
Hide
Senior Engineer, Application Security
Jacksonville, Florida, United States
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage platforms.
Senior engineer with experience in application security, SAST/DAST, CI/CD integration, and cloud environments.
SAST, DAST, Software Composition, WAF
3mo
Save
Mark Applied
Hide
Application Security Engineer
United States
RemoteFull Time
H.W. Kaufman Group
H.W. Kaufman Group: Global network of specialty insurance brokerage and underwriting companies.
5+ YOE5+ years in application security with SDLC integration, threat modeling, SAST/DAST, and regulatory alignment.
SAST, DAST, SCA, Burp Suite, Fortify, Veracode, Docker, Kubernetes
2mo
Save
Mark Applied
Hide
Senior Engineer, Application Security
Jacksonville or Provo
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage technology.
Experience in application security, SAST/DAST, secure SDLC, CI/CD, cloud, and penetration testing.
SAST, DAST, Software Composition Analysis, Web Application Firewall, CI/CD
2mo
Save
Mark Applied
Hide
Sr Security Engineer
Temple, Texas, United States
HybridFull Time
McLane
McLaneNYSE: BRK.B: Wholesale distribution and supply chain services for retailers.
6+ YOESenior cybersecurity engineer with 6–10 years in security engineering, DevSecOps, cloud security, SAST/DAST, and threat modelling.
Snyk, Sonatype, Black Duck, Jenkins, GitHub Actions, Azure DevOps, AWS, Azure, GCP, Terraform, Kubernetes, SAST, DAST
2mo
Save
Mark Applied
Hide
Lead Security Engineer
Suitland, Maryland, United States
OnsiteFull Time, Contract
B&A
B&A: Provides IT systems integration and data services to federal agencies.
15+ YOELead security engineer with 15+ years, DevSecOps, Zero Trust, SAST/DAST, ATO, CISSP, CCSP; US Citizenship required.
SIEM, SBOM, NIST SP 800-53, NIST Cybersecurity Framework, Zero Trust, SAST, DAST, DevSecOps, POA&M, ATO, Encryption, IAM, API security
3mo
Save
Mark Applied
Hide
Security Engineer - Application Security
Pittsburgh, Pennsylvania, United States
RemoteFull Time
Fragomen
Fragomen: Provides global immigration legal services and mobility solutions.
5+ YOE5+ years web app development; secure SDLC, DAST/SAST experience; strong communication; knowledge of secure coding and threat modeling.
DotNet, Python, Java, DAST, SAST, CSSLP, CASE
1mo
Save
Mark Applied
Hide
Application And Web Security Specialist
Little Rock, Arkansas, United States
OnsiteFull Time
Dillard's
Dillard'sNYSE: DDS: National department store chain retailing apparel, cosmetics, and home goods.
Experience with web and application security, DAST/SAST, web application firewalls, vulnerability verification, SDLC security controls, plus strong communication and ethical behavior.
Apache, WebSphere, CDN, OCP/Docker, Docker, Next.JS, React, DAST, SAST, web application firewall, LLMs, OWASP
1w
Save
Mark Applied
Hide
Lead Application Security Eng
Alpharetta, Georgia, United States
$125k-$175k/yr OnsiteFull Time
Morgan Stanley
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
10+ YOE10+ years IT experience with 7+ years in application security, expertise in SAST/SCA/DAST, CI/CD integration, security reviews, metrics reporting, and stakeholder communication.
SAST, SCA/OSS, DAST, Python, PostgreSQL, MongoDB, Kafka
3mo
Save
Mark Applied
Hide
DevOps Engineer
Ogden, Utah, United States
OnsiteFull Time
TAB Bank
TAB Bank: Offers commercial lending and digital banking solutions for businesses.
3+ YOE3+ years in application security, DevSecOps, or related roles; hands-on with SAST/DAST/SCA and container/code scanning; experience with Terraform and AWS; strong communication and integrity.
SAST, DAST, SCA, container security, Terraform, AWS
6d
Save
Mark Applied
Hide
Sr. Application Security Engineer
United States
$130k-$190k/yr RemoteFull Time
Mitek Systems
Mitek SystemsNASDAQ: MITK: Provider of AI-powered identity verification and mobile deposit solutions.
5+ YOE5+ years in application security with hands-on SAST/DAST/SCA, application penetration testing, secure code review, threat modeling, API security, and developer enablement.
SAST, DAST, SCA, OWASP Top 10, OAuth 2.0, mTLS, STRIDE, PASTA
6d
Save
Mark Applied
Hide
AppSec Sales Engineer - East
Raleigh or Atlanta
RemoteFull Time
Harness
Harness: AI-powered platform for automating software delivery and DevOps.
Experienced pre-sales engineer with AppSec knowledge (SAST/DAST/SCA), demo and workshop delivery, ability to translate security needs to engineering, and willingness to travel occasionally.
SCA, SAST, DAST, Harness AI, Software Delivery Knowledge Graph
1d
Save
Mark Applied
Hide
Senior Application Security Compliance Lead
Charlotte, North Carolina, United States
HybridFull Time
SMBC Group
SMBC GroupNew York Stock Exchange: SMFG: Provides global banking, investment, securities, and consumer finance services.
5+ YOE5+ years in application security with SAST/DAST experience, code review ability, vulnerability remediation, CI/CD integration, container security, and use of Jira/Confluence.
SAST, SCA, DAST, IAST, Jira, Confluence, C#, C++, Java, Python, .NET
1mo
Save
Mark Applied
Hide
Cyber Security Analyst III - App Security & Vulnerability (Remote)
Raleigh or North Carolina or Arizona or Texas
RemoteFull Time
First Citizens Bank
First Citizens BankNasdaq: FCNCA: Provides full-service consumer, commercial, and wealth management banking.
6+ YOEHands-on experience with SAST/DAST/SCA and web application security, proficiency in scripting languages, vulnerability triage and remediation, and experience integrating security into SDLC/CI-CD.
SAST, DAST, SCA, Checkmarx, Veracode, Fortify, Snyk, Burp Suite, OWASP ZAP, Jenkins, GitHub Actions, Azure DevOps, AWS, Azure, GCP, Postman, SoapUI, Python, Java, JavaScript, Bash
1mo
Save
Mark Applied
Hide
Application Security Engineer
Phoenix, Arizona, United States
OnsiteFull Time
SmartRent
SmartRentNYSE: SMRT: Provides smart home and building automation for rental housing.
4+ YOE4–6 years in application security; secure SDLC; cloud and web security; strong communication; experience with OWASP, SAST/DAST/SCA; AWS and WAF knowledge.
SAST, DAST, SCA, GHAS, Burp Suite, Fortra, OWASP, JWT, OAuth, AWS, WAF, CloudFlare
3mo
Save
Mark Applied
Hide
Application Security Engineer
Lindon, Utah, United States
OnsiteFull Time
Awardco
Awardco: Software platform for employee recognition and corporate rewards programs.
6+ YOE6+ years in application security or secure software engineering; cloud SaaS security; web/API security; experience with SAST/DAST and CI/CD; mentoring developers.
SAST, DAST, Dependency scanning, Container scanning, GitHub Advanced Security, Snyk, Wiz
1w
Save
Mark Applied
Hide
Lead Application Security Eng
Alpharetta, Georgia, United States
$125k-$175k/yr OnsiteFull Time
Morgan Stanley
Morgan StanleyNYSE: MS: Provides global investment banking, wealth management, and advisory services.
10+ YOE10+ years IT experience with 7+ years in application security; expertise in SDLC, SAST/SCA/DAST, container scanning, CI/CD integration, security reviews, and stakeholder communication.
SAST, SCA/OSS, DAST, CI/CD, Python, PostgreSQL, MongoDB, Kafka, TCP/IP, HTTP, SSL/TLS
3mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Boston or New York
$234k-$300k/yr HybridFull Time
Datadog
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
2w
Save
Mark Applied
Hide
React and Node.js FSD Engineer
Dallas, Texas, United States
$100k-$120k/yr OnsiteFull Time
Tata Consultancy Services
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOE8+ years experience building React and Node.js applications; backend with FastAPI, .NET, or Node.js; PostgreSQL and ORM experience; familiarity with security (DAST/SAST/SCA) and Azure DevOps.
React, React.Net, Vite, Tailwind, FastAPI, .NET, Node.js, DAST, SAST, SCA, PostgreSQL, SQLAlchemy, EF Core, Playwright, Azure DevOps, Azure App Services, Veracode, OWASP, Key Vault, GitHub Copilot, Agent workflows, Node.js, Visual Studio Code, Git, SSMS, MSSQL
1d
Save
Mark Applied
Hide
App security Specialist - Pentester
United States
OnsiteFull Time
Cognizant
CognizantNASDAQ: CTSH: Provides IT consulting and technology services to global enterprises.
3+ YOEMid-level application security experience with SAST/DAST/SCA/manual code review, vulnerability validation, CVSS scoring, CI/CD integration, reporting, and remediation coordination.
SAST, DAST, SCA, CI/CD, CVSS