Application Security Engineer

Job Summary

Driving application security for customer-facing platforms, the full-time Senior Application Security Engineer will manage the application security scanning program, triage vulnerabilities, and collaborate with engineering teams to ensure secure software development practices in a fully remote environment.

Key responsibilities

• Build and run the application security scanning program, tuning tools to minimize noise and highlight real risks
• Triage findings from various security assessments and track remediation efforts to closure
• Partner with engineering teams to address vulnerabilities through hands-on debugging and code-level guidance

Required qualifications

• 5+ years of experience in application security, security engineering, or software engineering with a security focus
• Hands-on experience with SAST, DAST, and dependency/SCA scanning tools
• Deep understanding of common vulnerability classes, including the ability to review code and architecture for security issues
• Experience with cloud environments, preferably AWS, and securing CI/CD pipelines
• Strong communication skills to convey risk and remediation steps to both technical and non-technical stakeholders