Senior Application Security Engineer

Job Summary

Focusing on embedding security into the software development lifecycle, the full-time remote Senior Application Security Engineer will own the strategy for application security tooling and automation while collaborating with developers and engineering teams to ensure secure design practices.

Key responsibilities

• Define and enforce best practices for secure coding and design reviews across engineering teams
• Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines
• Partner with developers to identify risks early in the lifecycle of new features and systems

Required qualifications

• 6+ years in security engineering, DevSecOps, or related roles
• Strong experience integrating security into modern SDLC pipelines
• Hands-on experience with AppSec tooling such as Snyk and OWASP ZAP
• Solid understanding of web app security and API security
• Strong programming skills in Python, Go, or JavaScript