Application Security Engineer

Job Summary

To enhance application security practices, the full-time Application Security Engineer will work remotely, collaborating with engineering, architecture, and DevOps teams to implement secure-by-design methodologies throughout the software development lifecycle.

Key responsibilities

• Partner with engineering teams to embed security requirements and practices into the software development lifecycle
• Conduct threat modeling, secure design reviews, and application architecture assessments for internal applications and APIs
• Administer application security tools and provide guidance on secure coding practices and vulnerability remediation

Required qualifications

• Bachelor's degree in computer science, information security, software engineering, or a related field
• 5+ years of experience in application security or secure software engineering, with a focus on enterprise environments
• 5+ years of hands-on experience with secure SDLC practices, code review, and security testing
• Industry certifications such as CSSLP or CISSP are preferred
• Strong understanding of modern web and API architectures, as well as common application vulnerabilities and remediation strategies