Application Security Engineer

Job Summary

Joining the InfoSec team as a full-time remote Application Security Engineer, the successful candidate will embed security into the software development lifecycle, champion secure design practices, and integrate security tooling within CI/CD pipelines while participating in on-call rotations.

Key responsibilities

• Embed security into every phase of the SDLC and conduct secure code reviews
• Integrate and maintain security tooling across CI/CD pipelines while enforcing security quality gates
• Operate the application vulnerability management lifecycle and communicate security risks to stakeholders

Required qualifications

• 3+ years in application security engineering
• Proven experience with security tooling integration into CI/CD pipelines
• Hands-on experience securing deployments in AWS with container and Kubernetes security
• Demonstrated expertise in security-by-design in TypeScript, Swift, and/or Kotlin
• Beneficial certifications include AWS Certified Security Specialty or equivalent