Senior Web Application Penetration Tester Jobs

The MongoDB Database Experience team is a diverse group of contributors working together to help our users manage MongoDB at global scale. This includes building tools for MongoDB Atlas: our database as a service offering and fastest growing product which allows users to deploy fault-tolerant, globally distributed MongoDB clusters in just minutes. We're seeking a Senior Software Engineer to join our Developer Tools Team within the Database Experience department. The team is responsible for tools which allow users to interact with their data and to understand the health and performance of their MongoDB deployments. The Developer Tools Team works on a variety of APIs and customer-facing UIs empowering MongoDB users to interact with their stored data, whether that’s on desktop via MongoDB Compass or in the browser via Atlas Data Explorer. This role is fully remote for a candidate based in the United States with US citizenship. We're looking for someone who Is a full stack engineer with a willingness to take on both frontend tasks and backend tasks Has experience with the design and architecture of a modern, scalable, high availability web application Has experience working with databases Enjoys collaboration and being part of a team Is approachable, curious, and intellectually honest Would enjoy chasing down difficult problems in a distributed environment Always strives to expand their knowledge Nice to Haves Knowledge of database internals and tuning mechanisms, particularly indexing Previous work in TypeScript, React, and Node.js, particularly maintaining an ecosystem of dependencies Experience working with websocket based client to server communication Familiarity with developing and supporting microservice based architectures using Kubernetes About MongoDB MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and d

About Ubiquiti At Ubiquiti Inc., we create technology platforms for Businesses, Smart Homes, and Internet Service Providers, driven by our goal to connect everyone, everywhere. To date, Ubiquiti has shipped over 100 million devices worldwide, from ISP networking products to next generation of IT solutions. Our growth is made possible by the dedicated team of hundreds behind the scenes. From software developers and product managers to designers and strategists, Team UI is driven to achieve our common goal: Rethinking IT. At Ubiquiti, you’ll heighten your potential and broaden your horizons - all while shaping the future of connectivity. Ubiquiti Prague office is looking for talented Backend developer for the UniFi Team. You’ll be working on the UniFi application back-end to develop efficient, scalable and maintainable features. This role requires working from our Prague office at least two days per week. The project stack: Kotlin; Spring Boot 4.0; PostgreSQL; Github Actions; Go. Responsibilities: REST API development Develop integrations with network device firmware and other UniFi OS applications. Participate in all phases of development, including feature design and testing. Code reviews for other team members. Requirements: Senior-level engineering experience, typically 5+ years shipping production systems. Strong problem-solving and systems thinking - you can break down ambiguous problems and design good solutions. Good understanding of SOLID principles. Experience in web application development. Daily, fluent use of AI coding assistants as a core part of your workflow. Fluent in English and Czech. Nice to have: Kotlin and Spring framework knowledge. Advanced knowledge of networking. Familiarity with networking, virtualization, storage and HW in general. Experience with Bash and Unix. Benefits​: Competitive salary, 5 weeks of vacation per year. Discretionary bonuses based on individual performance

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Security Analysts to help us scale. Come be part of a team at Lyft focused on enabling and empowering engineering teams to deliver at scale. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust. Lyft Security builds systems to protect and defend infrastructure and services from cyber attacks. We consult with teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work has company wide impact and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, bikes, scooters, etc. We believe in scaling security through engineering fundamentals, automation, and tooling. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built. Our Incident Response team lives at the intersection of speed and precision. We own the full lifecycle of security incidents and stay ahead of the curve with our Threat Hunting program. We are looking for a Security Analyst who is passionate about refining feedback loops and executing proactive security actions. In this fast-paced, ever-evolving landscape, we prioritize knowledge sharing and mentorship. You will collaborate closely with Senior Analysts to sharpen your technical edge, ensuring that as our environment grows, your expertise grows with it. Responsibilities: Incident Response: Respond promptly

We are looking for a Senior Software Engineer to become part of our storage management plane team. The management plane is a web-based application crafted to provide our storage customers the capabilities to handle and supervise our distributed storage infrastructure. Our team is continually dedicated to acquiring and implementing ground breaking technologies to overcome obstacles and innovate solutions for improving our ability to handle large clusters of machines efficiently. What You Will Be Doing: Maintain and develop Kubernetes operators and our Container Storage Interface (CSI) plugin. Develop a web-based solution that manages, operates and monitors our distributed storage. Work closely with other teams to define and implement new APIs. What We Need to See: B.Sc., M.Sc. or Ph.D. in Computer Science, or related discipline, or equivalent experience. 8+ years of experience in web development ( both client and server ) Proven experience with Kubernetes (K8s), including developing or maintaining operators and/or CSI plugins. Experience scripting with Python, Bash or similar. Experience with nodejs is a must At least 5 years of experience working in a Linux OS environment You’re smart and a quick learner You do what it takes to get the job done Passionate about coding and big challenges Ways to stand out from the crowd: NodeJS for the server side: dominant modules are async & express . Kafka, MongoDB, K8s JavaScript frameworks: React, jQuery, c3j

The Senior .NET Application Developer - Assistant Vice President is an intermediate level position responsible for design, development, and maintaining responsive and user-friendly web interfaces using .NET Core MVC , ASP.NET, JavaScript , Bootstrap , and CSS in coordination with the Technology team. The overall objective of this role is to contribute to applications systems analysis and programming activities. Responsibilities: Conduct tasks related to feasibility studies, time and cost estimates, IT planning, risk technology, applications development, model development, and establish and implement new or revised applications systems and programs to meet specific business needs or user areas Monitor and control all phases of development process and analysis, design, construction, testing, and implementation as well as provide user and operational support on applications to business users Utilize in-depth specialty knowledge of applications development to analyze complex problems/issues, provide evaluation of business process, system process, and industry standards, and make evaluative judgement Recommend and develop security measures in post implementation analysis of business usage to ensure successful system design and functionality Consult with users/clients and other technology groups on issues, recommend advanced programming solutions, and install and assist customer exposure systems Ensure essential procedures are followed and help define operating standards and processes Has the ability to operate with a limited level of direct supervision. Can exercise independence of judgement and autonomy. Responsibilities: Design, develop, and maintain responsive and user-friendly web interfaces using .NET Core MVC , ASP .NET, JavaScript , Bootstrap

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available locations: Lisbon, Portugal or London, UK. This role requires two days in office, it is not a fully remote role. About The Team Application Security is responsible for Cloudflare’s fast-growing security product portfolio including WAF, Page Shield, Web Asset Management and API Shield. Being part of Cloudflare means working at internet scale and we are uniquely positioned to tackle challenging problems related to being connected to

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: London, Lisbon, or New York About the Role As a Senior Product Manager for Application Protection & Governance, you’ll join our core Application Security team to protect web, API applications against evolving abuse and threat patterns. You will own the product outcomes that help customers deploy, operate, and improve security controls over time, turning complex security requirements into practical capabilities and operational gu

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. Role Overview As our Application Security Engineer, you will be the primary owner and driver of our application security program. You'll work hands-on with engineering teams to embed secure development practices, improve tooling and automation, and guide security considerations for new features, architectures, and services. This is a high-impact role where you'll shape the future of AppSec at a company that values security as a core part of product quality. What You'll Do Application Security Ownership Lead and evolve the company's application security strategy, roadmap, and day-to-day operations. Serve as the primary AppSec partner for numerous dev teams working on Ruby on Rails web apps, React Native mobile apps, and various other projects including Python and Go. Provide security guidance during design, development, and code review for new features and projects. Drive adoption of secure coding practices and threat-modeling across engineering teams. Tooling & Automation Manage and optimize existing AppSec tooling, including: GitHub Advanced Security (SAST, SCA, Secret Scanning) Invicti (DAST) Hadrian (ASM) AppDome (mobile application security) Cloudflare WAF Improve automation and integration of security tools into CI/CD pipelines. Identify and implement additional tools or processes to strengthen the security p

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Security Platform Engineer who is skilled at diving into complex software designs to identify security flaws and vulnerabilities. This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan. WHAT WE DO The Rockstar Games Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business and protect our players. We independently assess our application code and builds through various techniques (static analysis, dynamic analysis, software composition analysis, etc.) to identify potential vulnerabilities and design flaws and work with development teams to remediate. RESPONSIBILITIES Architect and support secure software development lifecycle operations embedded in software development pipelines. Provide technical security guidance to developers, team leads, and producers. Drive remediation efforts behind internally and publicly identified vulnerabilities. REQUIREMENTS 5+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws, assisted by automated pipelines. Knowledge of common web security vulnerabilities (e.g., OWASP Top 10), client-side security landscape, attack techniques and remediation tactics/strategies. Experience implementing and tuning SAST, SCA

Reolink , a leader in intelligent visual technology for homes and businesses, was founded in 2009 by a group of engineers with a strong commitment to and passion for smarter security solutions. Our products are now trusted by millions of users across more than 110 countries and regions worldwide. Building on this trust, we continue expanding our presence and bringing our innovations to more markets around the globe. Reolink remains committed to delivering advanced, reliable, and user‑centric solutions that empower people to protect what matters most. 5 Work Days Per Week Current Office Near to Kaki Bukit MRT, Singapore Will Relocate to Tai Seng MRT in September 2026 Medical & Dental Benefits Provided Entitled to Yearly Bonus & Performance Bonus **Current Application & Web App are Java Programming** Job Requirements Bachelor's or Master's Degree in Computer Science, Software Engineering , or a related technical discipline At least 3 years of software development experience in JAVA Programming is preferable for this post Strong understanding of computer science fundamentals (operating systems, network principles, data structures, and algorithms) Programming Languages: High proficiency in Java (including JVM internals and performance tuning) or Node.js (including its event-driven architecture and asynchronous programming model). Proficiency in both is a significant plus. Frameworks & Middleware: Proficient with common open-source frameworks and tools such as Kafka, RocketMQ, Dubbo, Zookeeper, and Redis. Deep knowledge of MySQL , including schema design, SQL optimization, and database scaling strategies. System Experience: Proven, hands-on experience in building, deploying, and maintaining high-concurrency, high-performance, and high-availability systems. Job Responsibilities ( Senior Backend Engineer) Design & Development Take ownership of the design, development, refactoring, and performance opt

Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality. We’re looking for a Senior Software Engineer to build and evolve Webflow Cloud, helping builders and marketing practitioners build, deploy, and run full-stack web applications with the assistance of cloud based AI agents. About the role: Location: Remote-first (Argentina) Permanent, full-time employee (this is not a contractor position) Application Information: Application deadline: applications accepted on an ongoing basis until position is closed and filled This posting is for an existing vacancy Reporting to the Senior Engineering Manager, Cloud As a Senior Software Engineer, Cloud, you'll … Build and operate reliable cloud services on AWS and Cloudflare, drawing on experience with compute, storage, networking, and managed infrastructure. Evolve the infrastructure that powers web applications and AI agents on Webflow Cloud. Participate in the team’s on-call rotation, investigate production incidents, and drive improvements that prevent recurring issues. Utilize CDN and edge compute capabilities that help customers deliver fast, resilient websites and applications around the world. Own features from customer problem through design, implementation, rollout, and ongoing improvement. Use AI-assisted development practices to accelerate delivery while applying sound engineering judgment, rigorous validation, and clear accountability for code quality. Participate in engineering citizenship activities such as co-authoring engineering blogs, strengthening our hiring processes, and leading internal hackathon teams. About you: BA/BS Degree or equivalent experience 5+ years building and operating backend services in production Demonstrated experience in backe

Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality. We’re looking for a Senior Software Engineer to help us build the next generation of Agentic Codebases About the role: Location: Remote-first (Argentina) Permanent, full-time employee (this is not a contractor position) Application Information: Application deadline: applications accepted on an ongoing basis until position is closed and filled This posting is for an existing vacancy Reporting to the Senior Engineering Manager, Developer Productivity As a Senior Software Engineer, Developer Productivity , you'll: Design and build the Nest.js service scaffolding that lets product teams stand up new backend services in our next-generation monorepo Implement paved paths, generators, and the platform primitives that make a new service work on day one rather than after a week of wiring. Build the seams that let new services run independently of our existing monolith. Own the deployment story for services and web applications on Cloudflare, and the interoperability with our existing AWS and Kubernetes estate managed through Pulumi and Argo CD. Lead migrations of substantial codebases into the monorepo and turn each one into a repeatable recipe rather than a bespoke effort. Partner directly with product teams as platform customers, treating their adoption as the measure of success and their friction as your backlog. Raise the leverage of the whole team by encoding what you learn into tooling, generators and agent-assisted workflows, so the next migration costs less than the last. Participate in engineering citizenship activities such as co-authoring engineering blogs, strengthening our hiring processes, and leading internal hackathon teams. About you&nbs

Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality. About the Role We’re looking for a S enior Infrastructure Engineer to improve reliability and stability of Webflow’s customer-facing, production infrastructure, serving millions of page views per hour. Our product is used by over 2 million users world-wide across 190 countries, and you’ll help ensure our platform is secure and scalable for these users as tens of thousands of projects are launched on Webflow each month. Location: Remote-first (Argentina) Permanent, full-time employee (this is not a contractor position) Application Information: Application deadline: applications accepted on an ongoing basis until position is closed and filled This posting is for a new position. As an Senior Infrastructure Engineer you will: Own and evolve the cloud platform that Webflow's product and engineering teams depend on, including our compute layer, EKS fleet, serverless infrastructure, networking, and cloud operations across AWS and GCP. Help design and maintain our infrastructure-as-code foundation, evolving the patterns and shared components other teams build on. Design and maintain the networking layer that connects Webflow's services, ensuring reliability, security, and scalability across our cloud environments. Help make observability data the foundation of how we operate, improving the dashboards, alerts, and SLOs for the infrastructure you own so that issues are caught before customers notice, and on-call pages are actionable instead of noisy. Build and maintain AI-powered automation that improves how we manage cloud infrastructure, from policy-as-code and drift detection to LLM-assisted runbook generation. Help define the culture of this growing team as

Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at Webflow will need grit, because we move fast, without ever sacrificing craft or quality. We're looking for a Senior Staff Software Engineer to help lead the technical future of Convert — our suite of products that give marketing and growth teams the tools to experiment, personalize, and drive real revenue from their web presence. About the role: Location: Remote-first (United States; BC & ON, Canada) Full-time Permanent Exempt The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills. United States (all figures cited below are in USD and pertain to workers in the United States) Zone A: $ 232,000 - $ 290,000 Zone B: $ 217,600 - $ 272,000 Zone C: $ 204,800 - $ 256,000 Canada (figures cited below are in CAD and pertain to workers in ON & BC, Canada) $253,000 - $ 316,000 This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level. Payouts are based on company performance against established financial and operational goals. Please visit our Careers page for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter. Application Information: Application deadline: applications accepted on an ongoing basis until position is closed and filled This posting is for a new position Reporting to the Director, Engineering As a Senior