Senior Application Security Engineer

Job Summary

To enhance application security across the software development life cycle, the remote Senior Application Security Engineer will design, operate, and continuously improve an application security scanning ecosystem, integrating various security tools and managing vulnerability remediation processes.

Key responsibilities:

• Manage upgrades, licensing, and operational tasks for security tools like Sonatype, Fortify, StackRox, and Burp Suite
• Integrate application security tools into CI/CD pipelines and standardize secure development workflows
• Provide actionable security findings and collaborate with engineering teams to remediate vulnerabilities in code and configurations

Required qualifications:

• Active Secret clearance required
• 5+ years of experience in application security engineering and/or DevSecOps in regulated environments
• Hands-on experience with Sonatype, Fortify, StackRox, and Burp Suite
• Strong CI/CD and automation skills with a focus on security integrations
• Working knowledge of secure SDLC, OWASP Top 10, and container/Kubernetes security