Application Security Testing Engineer

Calance US is seeking an Application Security Testing Engineer for an onsite role in Dallas. This hands-on position centers on dynamic and web application testing, leveraging a mix of DAST, penetration testing, and WAF review, supported by vulnerability tooling to guide remediation. The role blends technical rigor with an understanding of developer workflows, backed by practical Linux skills and a tool-agnostic approach.

Location

Dallas, TX — onsite

Engagement details

Contract duration: 12 months

Compensation

USD 75 - 85 per hour

Responsibilities

• Perform hands-on web application testing and security assessments (DAST, penetration testing, WAF review)
• Manage vulnerability tooling and provide remediation guidance and debugging support via API
• Use intercepting proxies (Burp Suite/ZAP) for inspection and capture
• Apply Linux skills across testing environments
• Work in a tool-agnostic manner with no specific development language preference, while understanding a developer's thought process

Requirements

• Linux skills required
• Comfortable working with intercepting proxies (Burp Suite/Zap)
• Tool-agnostic approach with no specific development language preference; understanding of a developer's thought process
• Strong personality fit with the ability to work independently, as resources are constrained

Technologies

• Burp Suite
• ZAP
• Wireshark
• ServiceNow
• Tanium
• TPRM tooling

Preferred

• Experience with Wireshark and ServiceNow
• Familiarity with automation and AI use-case workflows
• Familiarity with Tanium (implementation/integration best practices)
• Familiarity with TPRM tooling