Remote AppSec Engineer: Secure SaaS & DevSecOps

Far Coder; United Kingdom; Remote; GBP 119,000 - 156,000; Full time

Benefits offered by this job

Health insurance

401k matching

Unlimited PTO

Remote work from anywhere in US

Job summary

Vannevar is seeking an experienced Application Security Engineer to help secure our SaaS platform. This is a full-time, remote role with work locations in USA, UK and Europe, partnering with software, DevOps, and platform teams to embed threat modeling and automated AppSec checks into the SDLC.

You will implement SAST/SCA, DAST, container/IaC checks in CI/CD, drive threat modeling, and coach secure-by-default practices across engineering.

Qualifications

• 5+ years in Application / Product Security.
• Hands-on experience securing web applications and automating AppSec workflows.
• Familiarity with DevSecOps practices and container security & patching.
• Experience with GitHub Actions, Python, TypeScript/JavaScript.
• Clear, concise communicator who can translate risk for engineers.

Responsibilities

• Implement and deploy enterprise standard SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD.
• Embed with development teams to run threat models, review critical PRs, and coach secure-by-default habits.
• Drive a shift-left vulnerability detection program to identify and remediate vulnerabilities earlier in the software development lifecycle (SDLC).
• Coordinate with DevOps for application security issues that cross between application and infrastructure layers.
• Support incident-response for product issues and feed lessons back into code, docs, and process.

Skills

AppSec experience

Web app security

DevSecOps

GitHub Actions

Python

TypeScript/JavaScript

Communication skills

Tools

CI/CD tools

Container security

Job description

Vannevar is seeking an experienced Application Security Engineer to help secure our SaaS platform. This is a full-time, remote role with work locations in USA, UK and Europe, partnering with software, DevOps, and platform teams to embed threat modeling and automated AppSec checks into the SDLC.

You will implement SAST/SCA, DAST, container/IaC checks in CI/CD, drive threat modeling, and coach secure-by-default practices across engineering.