QE Security Engineer

Job Title: QE Security Engineer

Location: Dallas County, TX (Hybrid 4 Days Onsite, 1 Day Remote)

Experience: 4 8 Years

Job Summary

- We are seeking a skilled Quality Engineering (QE) Security Engineer to join our team The ideal candidate will be responsible for performing security testing, validating vulnerabilities, and ensuring applications meet enterprise security standards throughout the software development lifecycle. This role requires close collaboration with development, QA, DevOps, and cybersecurity teams to identify, assess, and remediate security risks .

Key Responsibilities

- Perform application security testing throughout the SDLC.

- Conduct vulnerability assessments and validate remediation efforts.

- Execute security testing including:

- Dynamic Application Security Testing (DAST)

- Static Application Security Testing (SAST)

- Interactive Application Security Testing (IAST)

- Analyze vulnerability scan results and work with development teams to resolve security findings.

- Validate fixes for security vulnerabilities identified through internal testing and third-party assessments.

- Collaborate with developers to implement secure coding practices.

- Support CI/CD pipeline integration for automated security testing.

- Assist with penetration testing activities and security assessments.

- Document security findings, risk assessments, and remediation recommendations.

- Ensure applications comply with organizational security policies and industry standards.

_

Required Skills

- 4 8 years of experience in Quality Engineering, Application Security, or Security Testing.

- Hands-on experience with application security testing methodologies.

- Strong understanding of:

- OWASP Top 10

- Common Vulnerabilities and Exposures (CVE)

- Common Weakness Enumeration (CWE)

- Experience with security testing tools such as:

- Burp Suite

- OWASP ZAP

- Checkmarx

- Fortify

- Veracode

- SonarQube

- Knowledge of web application security principles.

- Familiarity with REST APIs and API security testing.

- Experience working with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or Azure DevOps.

- Understanding of authentication and authorization mechanisms including OAuth 2.0, SAML, JWT, and OpenID Connect.

- Experience with Git version control.

- Strong analytical and troubleshooting skills.

_

Preferred Skills

- Experience with cloud security (AWS, Azure, or Google Cloud Platform).

- Knowledge of container security (Docker, Kubernetes).

- Familiarity with Infrastructure as Code security tools.

- Experience with SIEM or vulnerability management platforms.

- Scripting experience using Python, PowerShell, or Bash.

- Exposure to Agile/Scrum development methodologies.

- Security certifications such as Security+, CEH, CSSLP, GWAPT, or OSCP are a plus .

Qualifications

- Bachelor s degree in computer science, Information Security, Cybersecurity, or a related field.

- Equivalent professional experience will also be considered.