Application Security Engineer

Overview

Application Security Engineer to help build secure software with confidence, supporting secure development lifecycle practices and application security governance.

What you'll do

• Serve as an accessible point of contact for engineering squads on secure development lifecycle guidelines.
• Review and interpret alerts from static analysis and software composition analysis tools, identifying true vulnerabilities vs false positives.
• Provide actionable guidance to remediate application security vulnerabilities, including OWASP Top 10 aligned issues.
• Maintain internal security documentation, developer playbooks, and secure coding training materials.
• Support application security governance by tracking security milestones and organizing evidence for compliance audits.
• Monitor application security metrics such as vulnerability patch timelines and policy exceptions for leadership reporting.
• Support AI governance frameworks and help ensure AI-enabled workflows align with privacy and security guardrails.

What you'll need

• Meaningful experience in an information security role, software engineering position, or IT audit function with an application security focus.
• Foundational understanding of software development processes and how security fits into agile environments.
• Comfort reading at least one major language used in cloud environments such as Python, JavaScript, or Go.
• Basic exposure to cloud environments such as AWS, GCP, or Azure and understanding of Git workflows.
• Conceptual understanding of vulnerability categories and web application security standards.
• Ability to integrate generative AI tools into daily workflows.

Details

• Location: USA Remote.