Senior Application Security Engineer - Remote

Overview

The Senior Application Security Engineer will work remotely, collaborating with software engineers to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC).

In Short

• Collaborate with development teams to assess risks and customize security solutions.
• Implement and manage security tools (SAST, SCA, DAST) in CI/CD pipelines.
• Review applications against common flaws (e.g., OWASP Top 10).
• Work with Risk & Compliance teams on audits (e.g., SOC 2, PCI-DSS, HIPAA).
• Define security guardrails through automated tool policies and custom rules.

Requirements

• 5+ years of experience in enterprise-level application security.
• Experience in AppSec or DevSecOps with proficiency in security tools.
• Solid background in software development and CI/CD pipelines.
• Experience in integrating cross-functional applications.
• Expertise in business and technical requirements analysis.
• Project management skills and exposure to project-based work.
• Understanding of end-user needs and requirements.

Benefits

• Great compensation package and bonus plan.
• Core benefits including full medical, dental, vision, and matching 401K.
• Flexible work environment, ability to work remote, hybrid or in-office.
• Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.