Application Security Engineer

Job Summary

Serving as a trusted security advisor within an Agile development organization, the full-time remote Application Security Engineer will integrate security throughout the Software Development Lifecycle (SDLC), conduct threat modeling, and collaborate with software engineering teams to enhance application security practices.

Key Responsibilities

• Embed security best practices throughout the Software Development Lifecycle (SDLC) and serve as the primary Application Security advisor for development teams
• Conduct threat modeling exercises, security risk assessments, and review application architectures from a security perspective
• Provide remediation guidance and support the deployment and effectiveness of application security testing programs

Required Qualifications

• 5+ years of experience in Application Security, Secure Software Development, DevSecOps, or a related cybersecurity discipline
• Hands-on experience performing threat modeling and security architecture reviews
• Strong understanding of vulnerability management and remediation processes
• Experience supporting security testing programs utilizing SAST, DAST, and SCA
• Knowledge of OWASP Top 10, SANS/CWE vulnerabilities, and secure coding principles