Application Security Engineer

Job Summary

Leading application security initiatives, the full-time remote Application Security Engineer will perform security code reviews, collaborate with development teams to integrate security practices, and manage vulnerability remediation efforts to enhance the security of software products.

Key responsibilities

• Conduct security code reviews, threat modeling, and architecture reviews as part of the secure Software Development Lifecycle (SDLC)
• Identify, track, and validate vulnerabilities from security testing, partnering with development teams for timely remediation
• Lead application security testing, including static, dynamic, and interactive testing methodologies

Required qualifications

• 3-7 years of experience in application security, secure development, or penetration testing
• Hands-on experience with application/security testing tools (SAST, DAST, IAST)
• Security+, GSEC, GSSP, or equivalent certification
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field (preferred)
• Familiarity with secure coding practices across multiple programming languages and knowledge of cloud-native and SaaS environments