Application Security Engineer

Accountabilities: Perform security code reviews, threat modeling, and architecture reviews across development projects as part of a secure SDLC. Partner with engineering teams to integrate secure design principles, coding standards, and appropriate security controls throughout development and deployment processes. Lead application security testing activities, including SAST, DAST, and IAST, and evaluate findings for risk and remediation priority. Identify, document, track, and validate security vulnerabilities and defects, working with development teams to meet established compliance and remediation timelines. Coordinate independent external penetration testing of production environments and support the review and remediation of resulting findings. Serve as an application security subject matter expert on vulnerabilities such as the OWASP Top 10 and emerging application security threats. Integrate security practices into code review, change management, CI/CD pipelines, and secure development operations. Promote secure development practices by collaborating with technical teams, sharing guidance, and helping improve application security processes and controls. Use AI and automation tools responsibly to improve security analysis, productivity, decision-making, and the quality of security outcomes. Requirements 3–7 years of experience in application security, secure software development, penetration testing, or a related cybersecurity discipline. Hands-on experience with application security testing tools and methodologies, including SAST, DAST, and/or IAST. Practical experience incorporating secure design principles into software development, code review, change management, CI/CD pipelines, or DevSecOps environments. Knowledge of application security vulnerabilities, secure coding practices, threat modeling, and the OWASP Top 10. Familiarity with secure coding across multiple programming languages such as C#, Go, Java, JavaScript, or Python. Experience with cloud-native and SaaS application environments. Strong analytical and problem-solving skills, with the ability to assess vulnerabilities and collaborate effectively on remediation. Ability to communicate technical security concepts clearly to software engineers and other stakeholders. Demonstrated ability to use AI tools thoughtfully to improve productivity, analysis, decision-making, and work quality. A Security+, GSEC, GSSP, or equivalent security certification is preferred. A bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related field is preferred. Must be authorized to work in the United States; visa sponsorship is not available for this position. Benefits Estimated salary grade range of $70,300–$101,300 per year. Anticipated hiring range of approximately $80,000–$90,000 per year, with the final offer based on skills, qualifications, experience, and other job-related factors. Comprehensive health insurance. Dental and vision insurance. Flexible Time Off. 401(k) plan. Remote work environment. Opportunities to work with modern security, software development, automation, and AI technologies. Collaborative environment focused on innovation, professional growth, and responsible technology adoption. Reasonable accommodations available throughout the interview process. Hiring process generally includes an introductory Talent Acquisition call, hiring manager interview, panel interview with an interview project, and offer stage; the process may vary by role.