Security Engineer

Dahl Consulting is a leading national retailer with a large-scale digital and e-commerce presence, seeking an experienced Security Engineer. The role focuses on strengthening the security posture of high-traffic web applications and APIs through hands-on penetration testing and collaboration with engineering teams.

Responsibilities:

• Planning and executing full-lifecycle penetration tests, including scoping, exploitation, validation, and reporting
• Assessing web applications and APIs for vulnerabilities, with a focus on the OWASP Top 10, authentication/authorization flaws, and injection attacks
• Leveraging core security tooling — including advanced use of Burp Suite, Nmap, and common exploitation frameworks — to uncover and confirm risks
• Developing scripts and automations in Python or Go to streamline and scale testing workflows
• Documenting findings clearly and providing actionable remediation guidance to engineering partners
• Collaborating with engineering teams to validate fixes and confirm vulnerabilities are fully remediated
• Identifying risk areas early through threat modeling and pre-deployment review

Requirements:

• 5+ years of hands-on penetration testing experience, focused on web applications and APIs in enterprise environments
• Demonstrated experience executing end-to-end penetration tests (scoping, exploitation, validation, and reporting)
• Strong working knowledge of web application vulnerabilities, including the OWASP Top 10, authentication/authorization flaws, and injection attacks
• Proficiency with core security testing tools, including: Burp Suite (advanced usage required), Nmap, Common exploitation frameworks
• Experience writing scripts or automations in Python or Go to support testing workflows
• Ability to clearly document findings with actionable remediation guidance for engineering teams
• Experience partnering with engineering teams to validate and remediate vulnerabilities
• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience
• 7+ years in cybersecurity, with demonstrated progression in penetration testing responsibilities
• Experience testing mobile applications, hardware/embedded systems, or third-party/vendor platforms
• Familiarity with PCI-related penetration testing requirements and compliance contexts
• Experience contributing to or supporting bug bounty programs (triage, validation, and escalation)
• Exposure to threat modeling and the ability to identify risk areas pre-deployment
• Experience mentoring or providing technical guidance to other testers
• Advanced understanding of networking and system architecture in large-scale environments
• Experience improving or automating penetration testing processes and tooling
• Relevant certifications such as OSCP, OSCE, OSWE, or CISSP