Application Security Engineer

Job Summary

Seeking a technically hands-on Application Security Engineer to join the Information Security team in a fully remote, full-time capacity, responsible for managing the vulnerability lifecycle, integrating security automation into the CI/CD pipeline, and acting as a subject matter expert during security incidents.

Key responsibilities

• Own the end-to-end vulnerability management lifecycle, including triage, prioritization, and remediation of findings
• Maintain and optimize security tooling integrations within the CI/CD pipeline to enhance automation
• Launch and run a Security Champions program to embed security knowledge within development teams

Required qualifications

• 3-5 years of dedicated Application Security experience in a SaaS or cloud-native environment
• Hands-on proficiency with SAST, DAST, SCA, or CSPM tooling
• Strong working knowledge of CI/CD pipelines and the ability to maintain pipeline integrations
• Experience with container security and API security patterns
• Ability to communicate technical risk effectively to non-security engineers