[Remote] Security Engineer
Note: The job is a remote job and is open to candidates in USA. Dahl Consulting is seeking an experienced Security Engineer for a contract role supporting a leading national retailer's large-scale digital and e-commerce environment. The role leads end-to-end penetration testing of web applications, APIs, and supporting infrastructure, while also advancing offensive security through automation, threat modeling, vulnerability validation, and technical collaboration with engineering teams.
Responsibilities
- Planning and executing full-lifecycle penetration tests, including scoping, exploitation, validation, and reporting
- Assessing web applications and APIs for vulnerabilities, with a focus on the OWASP Top 10, authentication/authorization flaws, and injection attacks
- Leveraging core security tooling — including advanced use of Burp Suite, Nmap, and common exploitation frameworks — to uncover and confirm risks
- Developing scripts and automations in Python or Go to streamline and scale testing workflows
- Documenting findings clearly and providing actionable remediation guidance to engineering partners
- Collaborating with engineering teams to validate fixes and confirm vulnerabilities are fully remediated
- Identifying risk areas early through threat modeling and pre-deployment review
Skills
- • 5+ years of hands-on penetration testing experience, focused on web applications and APIs in enterprise environments
- • Demonstrated experience executing end-to-end penetration tests (scoping, exploitation, validation, and reporting)
- • Strong working knowledge of web application vulnerabilities, including the OWASP Top 10, authentication/authorization flaws, and injection attacks
- • Proficiency with core security testing tools, including: + Burp Suite (advanced usage required) + Nmap + Common exploitation frameworks
- • Experience writing scripts or automations in Python or Go to support testing workflows
- • Ability to clearly document findings with actionable remediation guidance for engineering teams
- • Experience partnering with engineering teams to validate and remediate vulnerabilities
- • Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience
- • 7+ years in cybersecurity, with demonstrated progression in penetration testing responsibilities
- • Experience testing mobile applications, hardware/embedded systems, or third-party/vendor platforms
- • Familiarity with PCI-related penetration testing requirements and compliance contexts
- • Experience contributing to or supporting bug bounty programs (triage, validation, and escalation)
- • Exposure to threat modeling and the ability to identify risk areas pre-deployment
- • Experience mentoring or providing technical guidance to other testers
- • Advanced understanding of networking and system architecture in large-scale environments
- • Experience improving or automating penetration testing processes and tooling
- • Relevant certifications such as OSCP, OSCE, OSWE, or CISSP
Benefits
- A comprehensive benefits package for eligible employees, allowing them to choose coverage to meet their family’s needs.
Company Overview
Company H1B Sponsorship