Application Security Engineer

Description

• Enable development teams to adopt secure development practices through coaching, resources, and ongoing support
• Support teams in developing structured processes for managing alerts and remediation
• Ensure security tooling is effectively embedded within CI/CD workflows to support scalable and consistent security coverage
• Promote DevSecOps principles by advising on security automation and fostering shared responsibility
• Engage stakeholders to align security initiatives with business goals
• Communicate security risks, tool performance, and compliance status to leadership and stakeholders
• Define governance models for ownership, lifecycle management, and compliance of security tooling
• Drive the adoption and integration of application security tools and practices across development streams
• Promote awareness of emerging security threats and mitigation strategies
• Collaborate with each development group to establish coding standards, vulnerability and obsolescence management
• Provide mentorship and technical guidance & training on secure coding, threat modeling, and vulnerability management
• Act as a liaison between security and development teams to translate security requirements into actionable work items
• Create and maintain documentation for security processes, tools, and standards
• Advise on the integration and operationalization of application security tooling and practices, ensuring development teams are equipped to implement and maintain secure solutions
• Work with development leads to ensure scorecard compliance and continuous improvement
• Establish and maintain processes for identifying, triaging, and remediating vulnerabilities using automated security tooling
• Design and deliver targeted training and enablement programs tailored to development team needs and maturity levels
• Monitor and report on the effectiveness of security controls and posture across public-facing applications
• Coordinate with cross-functional teams to ensure alignment on governance and ownership of security tools and processes
• Evaluate and recommend improvements to existing security tooling and practices based on evolving needs and threat landscape

Requirements

• Strong knowledge of application security principles and secure SDLC.
• Proficiency with CI/CD pipelines and security automation.
• Excellent communication and collaboration skills.
• Excellent communication and collaboration skills
• Hands-on experience with security tools (e.g., GitHub Advanced Security, SonarCloud, SAST/SCA).
• Ability to translate technical security concepts into business-relevant language
• (Preferred certifications: CISSP, CEH, OSCP.)
• Familiarity with OWASP Top 10 and DevSecOps practices.
• Proven track record of working with cross-functional teams to drive security initiatives

Benefits

• Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits
• Great people and place to work with a hybrid work opportunity
• Pension and employee stock purchase plans with company contributions
• For this position, the expected salary range is between $100,000 and $120,000 annually. This range reflects our commitment to providing competitive compensation that aligns with industry standards and your qualifications.
• Career advancement and training opportunities

Training + Development

Interview process

Visa Sponsorship

Security clearance