Cybersecurity Specialist II - Application Security
Bristol Myers SquibbMatch Score
Against your primary resumeLogin to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Protocol Intelligence
Data-driven signals on your job's competitivenessLog in to see why each signal reads the way it does.
Job Description
Structured overview of role & requirementsAbout This Role
Perform hands-on penetration testing of web applications and APIs, including manual and automated techniques.
Identify, validate, document vulnerabilities with evidence, business impact, and remediation guidance; conduct retesting to confirm fixes.
Operate and improve DAST tools, support secure SDLC processes, threat modeling, security design reviews, and collaborate with development teams on remediation.
Minimum Requirements
4+ years of hands-on application security experience with strong penetration testing focus on web apps and APIs.
Practical knowledge of OWASP Top 10, API weaknesses, authentication, authorization, session management, input validation.
Experience using industry-standard penetration testing tools plus manual validation beyond automated scans.
Basic coding/scripting skills in Python, JavaScript, Java or similar; familiarity with DAST, secure SDLC, vulnerability management, and risk prioritization.
Ideal Candidate Profile
Experienced penetration tester with strong technical communication skills to explain risks and remediation to developers and architects.
Capable of working independently managing assessments and collaborating effectively across teams within secure software development environments.
Familiar with modern web tech, REST APIs, microservices, cloud platforms (AWS/Azure/GCP), AI security testing, and security frameworks like NIST/CIS Controls.