ZipRecruiter

Log In

1

Dast Scanner Jobs (NOW HIRING)

IT First Source

Application Security Engineer

Raleigh, NC

$57 - $76.25/hr

Configure DAST scans using pre-request scripts and custom scan settings to support complex authentication and application flows. * Monitor scan execution, status, and failures; troubleshoot issues ...

Eccalon LLC

Security Software Engineer

Hanover, MD

Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection). * Security Architecture & Controls * Design secure system and API architectures for multi-tenant cloud ...

next page

Showing results 1-20

People also search for

All JobsDast Scanner Jobs

Dast Scanner information

See salary details

$9

$16

$22

How much do dast scanner jobs pay per hour?

As of Jun 6, 2026, the average hourly pay for dast scanner in the United States is $16.16, according to ZipRecruiter salary data. Most workers in this role earn between $14.18 and $17.31 per hour, depending on experience, location, and employer.

What is the difference between Dast Scanner vs Penetration Tester?

AspectDast ScannerPenetration Tester
CredentialsCertifications like OSCP, CEH, or vendor-specificSame as Dast Scanner, plus hands-on testing experience
Work EnvironmentAutomated scanning tools, software-based assessmentsManual testing, on-site or remote assessments
Industry UsageCommon in security assessments, DevSecOpsUsed for in-depth security testing and vulnerability validation

While Dast Scanners automate vulnerability detection through software, Penetration Testers perform manual, in-depth security assessments. Both roles require similar certifications and are integral to cybersecurity, but Penetration Testers provide detailed, manual analysis beyond automated scans.

What are some common challenges faced by DAST Scanner professionals when integrating security testing into the software development lifecycle?

DAST Scanner professionals often encounter challenges when integrating dynamic application security testing into fast-paced development cycles, such as ensuring timely feedback without slowing down releases and managing false positives that may overwhelm developers. Collaboration with development and DevOps teams is crucial to effectively prioritize and remediate vulnerabilities without causing workflow disruptions. Overcoming these challenges typically involves automating scans, fine-tuning test configurations, and fostering a security-first mindset across teams.

What are DAST scanners?

DAST scanners, or Dynamic Application Security Testing scanners, are security tools used to identify vulnerabilities in running web applications. They work by simulating attacks on a live application, analyzing its responses to find security flaws such as SQL injection, cross-site scripting (XSS), and other common threats. DAST scanners do not require access to the application's source code and are often used during the testing or staging phases of development. They help organizations detect and fix security issues before software is released to production.

What are the key skills and qualifications needed to thrive as a Document Scanner, and why are they important?

To thrive as a Document Scanner, you need strong attention to detail, basic computer proficiency, and familiarity with document handling or records management, typically requiring a high school diploma or equivalent. Experience with scanning hardware, document management systems, and OCR (optical character recognition) software is commonly expected. Reliability, organization, and the ability to work efficiently in repetitive tasks are standout soft skills in this role. These skills ensure accurate digitization and secure handling of important documents, supporting organizational efficiency and data integrity.
Infographic showing various Dast Scanner job openings in the United States as of May 2026, with employment types broken down into 55% Full Time, 44% Part Time, and 1% Contract. Highlights an 76% Physical, 7% Hybrid, and 17% Remote job distribution, with an average salary of $33,609 per year, or $16.2 per hour.

Application Security Engineer - DAST & Burp Suite Enterprise Security Testing

TOMORROW HIRE

Washington, DC • Remote

$120K - $140K/yr

Full-time

Medical, Dental, Vision, PTO

Posted 19 days ago

Job description

Application Security Engineer

Location: Fully Remote (East Coast)
Clearance: Public Trust, Secret Clearance preferred
Employment Type: Full-time

Salary: $120,000-$140,000

Role Overview:

The Application Security Engineer will support the secure development and testing of applications by leveraging specialized tools, implementing security controls, and ensuring compliance with federal standards. This role involves hands-on work with application security testing (SAST, DAST, IAST), vulnerability management, secure coding practices, and collaboration with development teams to protect enterprise web applications in a federal environment.

Responsibilities:

  • Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and IDE Plug-in environments using Veracode and Burp Suite.
  • Design and implement enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
  • Secure enterprise web applications, with a focus on mitigating OWASP Top 10 risks, CVSS scoring, CWE, WASC, and SANS Top 25 vulnerabilities.
  • Integrate security practices into development workflows using IDEs such as Eclipse, JDeveloper (including pipeline development), or Visual Studio.
  • Perform application security testing and automation using tools such as OWASP ZAP, Burp Proxy, Selenium, and Interactive Application Security Testing (IAST) capabilities.
  • Write and maintain bash scripts to support security automation, testing, and troubleshooting tasks.
  • Participate in vulnerability discovery, triage, and remediation processes, including crowdsourced security programs via platforms like HackerOne.
  • Work in Linux or UNIX environments, including navigating file systems and troubleshooting basic website connectivity and security issues.
  • Ensure applications and security practices align with federal compliance standards, including NIST 800-53, FIPS, or FedRAMP.

Requirements

  • Minimum 6+ years of Information Technology experience with a focus on application and security engineering.
  • 3+ years of hands-on experience supporting application security testing, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
  • Demonstrated experience with SAST, DAST, and IDE plug-in integrations using tools such as Veracode and Burp Suite.
  • Experience performing authenticated and unauthenticated crawl auditing and DAST scanning using Burp Suite Enterprise Edition, including scan configuration, issue validation, and remediation coordination.
  • Experience with Interactive Application Security Testing (IAST) tools and methodologies.
  • Proficiency using OWASP ZAP and/or Burp Proxy for web application security testing.
  • Experience participating in vulnerability discovery and remediation programs, including HackerOne.
  • Experience with test automation tools, including Selenium.
  • Proficiency in bash scripting for security automation, testing, and troubleshooting.
  • 2+ years of development experience in one or more programming languages, including Java, Python, .NET, or C#.
  • Experience integrating security into development workflows using Eclipse, JDeveloper (including CI/CD pipeline development), or Visual Studio.
  • 3+ years of experience designing and implementing enterprise-wide security controls to secure applications, systems, networks, or infrastructure services.
  • Hands-on experience securing enterprise web applications, with strong knowledge of OWASP Top 10, CVSS, CWE, WASC, and SANS Top 25 vulnerabilities.
  • Knowledge of federal compliance and security frameworks, including NIST 800-53, FIPS, and FedRAMP.
  • Working knowledge of Linux or UNIX environments, including file system navigation and troubleshooting basic website connectivity issues.
  • High School Diploma or GED required.
  • Public Trust Determination or Active Security clearance (preferred)

Benefits

Salary: $120,000-$140,000

Benefits include Health, Vision, and Dental Insurance, and PTO.