Search for Application Security Engineer roles in the United States with a focus on web application security, requiring 3+ years of experience, familiarity with penetration testing tools, and a salary range of $116,000 to $175,000.

Okay, I've searched for Application Security Engineer roles in the United States focusing on web application security, requiring 3+ years of experience, familiarity with penetration testing tools, and a salary range of $116,000 to$ 175,000. I have found 58 positions for you.

Application Security Engineer

United States

3 years + Experience

Penetration Testing

$116000+

$175000-

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Application Security Engineer II at Fanatics Betting & Gaming plays a crucial role in fortifying the organization’s digital infrastructure by identifying and mitigating security vulnerabilities throughout the software development lifecycle. This position demands not only technical expertise in application security, particularly regarding penetration testing and an in-depth understanding of web application security principles including the OWASP Top 10, but also requires strategic interaction with cross-functional teams including developers and information security personnel. Successful candidates will face the challenge of integrating security practices seamlessly within fast-paced development cycles while ensuring compliance with industry standards and maintaining communication with non-technical stakeholders to foster an organizational culture of security awareness. Ultimately, this role is about building resilience against emerging threats and is integral to safeguarding the integrity of services that engage over 100 million global sports fans, setting the stage for ambitious growth in a competitive and evolving market.

Company Analysis:

Fanatics positions itself as a disruptive leader in the sports merchandising and betting sectors, aiming to connect a vast community of sports fans with their passions. This position in the Application Security team not only supports the security of technology solutions that enhance consumer engagement but also plays a part in maintaining brand integrity amid rapidly evolving regulatory landscapes in sports betting. The company's culture appears to prioritize innovation and agility, reflecting a commitment to continuous improvement in fan-related experiences. The role offers visibility within the broader organization, especially given the high stakes associated with security in the burgeoning betting market. Being part of a team that influences millions, candidates should expect a dynamic environment that rewards cross-collaboration, adaptability, and a forward-thinking approach to both security and technology. As a strategic hire, this role will contribute to the long-term goals of ensuring that Fanatics Betting and Gaming can expand its footprint safely and effectively while ensuring cutting-edge security protocols are maintained to protect client data and trust.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Tell me about a time when you had to address a significant security vulnerability in a product or service. What steps did you take?
Can you describe an experience where you had to explain a complex security issue to non-technical stakeholders? How did you ensure they understood the implications?
Have you ever disagreed with a developer about a security feature? How did you approach that situation?
What is your strategy for keeping up-to-date with the latest threats and vulnerabilities in application security?
How would you conduct a threat model for a new sports betting feature being integrated into the application?
Describe the steps you would take during a code review to identify potential security loopholes.
What security testing tools have you used in the past, and how did they help in assessing vulnerabilities?
Given the importance of secure coding practices, how would you collaborate with development teams to promote these principles?
Imagine you discover a major vulnerability late in the development process. What actions would you take to address this while minimizing impact on the timeline?
Why are you interested in working at Fanatics, particularly in the context of its Betting and Gaming division?
What do you find most exciting about the future of application security in the sports betting industry?
How do your own professional values align with those outlined by Fanatics in serving global sports fans?
What questions do you have about our team's approach to integrating security into the development lifecycle?

Job Details

Overview Company

Application Security Engineer II

$116k/y-$175k/y

Fanatics

4 days ago

Highlight

RemoteFull-time3+ yearsMid

Summary

Fanatics is seeking an Application Security Engineer II to join their team remotely. The role involves leading the organization in identifying, assessing, and remediating vulnerabilities within the Information Security department.

About the Role

As an Application Security Engineer II, you will perform threat modeling and architecture reviews, work with development teams to remediate security issues, collaborate on security assessments of third-party software, conduct penetration testing, vulnerability assessments, and code reviews, stay updated on security trends, and participate in incident response activities.

About You

Required:

Bachelor's degree in Computer Science, Information Technology, or a related field.
3+ years of experience in application security, including penetration testing.
Strong understanding of web application security principles and OWASP Top 10 vulnerabilities.
Familiarity with security testing tools such as Burp Suite, Nessus, Fortify, or similar tools.
Knowledge of secure coding practices and ability to work closely with development teams.
Effective communication skills with technical and non-technical stakeholders.
Ability to prioritize and balance multiple projects simultaneously.
Ability to collaborate and work in a team environment.

Preferred:

Experience with scripting languages such as Python or Bash.
Relevant certifications such as OSWA/OSWE, GWAPT, or CEH.

Benefits

Salary range: $116k–$175k per year, varying based on location.
Eligibility for the Fanatics Betting and Gaming annual bonus program and an equity award.
Medical, Dental, Vision, 401K, paid time off.
Additional benefits like GymPass, Pet Insurance, Family Care Benefits.
$700 to set up your home office.

Fanatics

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

United States