12665 - Senior Application Security Engineer - Virtual - USA

Kelly Services Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

A leading company is seeking an Application Security Engineer to enhance security within their software development lifecycle. This role calls for expertise in application security practices, collaboration with development teams, and the ability to communicate complex security concepts. Candidates with relevant certifications and practical experience are encouraged to apply.

Qualifications

• 3+ years of experience in application security or secure coding.
• Understanding of security vulnerabilities (OWASP Top 10, CVE database).
• Familiarity with secure development frameworks (DevSecOps, Agile).

Responsibilities

• Safeguard applications by integrating security best practices.
• Conduct security assessments and identify vulnerabilities.
• Work with development teams to ensure secure coding.

Skills

Application security

Secure coding

Penetration testing

Communication

Education

Relevant certifications (e.g., CISSP, CEH, OSCP, CSSLP)

Tools

Veracode

OWASP

ZAP

Job description

Together, we change lives.

Kelly is a team of experts driven by our belief that the impact of the right person in the right job is limitless.

No matter where you are in your career journey, you can apply your knowledge and passion to move people, organizations, and communities forward. You'll have opportunities to grow your expertise and capabilities, both professionally and personally. As a team, we celebrate inclusion, caring, and collaboration. As a company we value your contribution, we work with integrity, and we always put people first - so your impact really will change lives.

Kelly's Application Security Engineer is responsible for:

• Safeguarding our applications by embedding security best practices throughout the software development lifecycle (SDLC).
• Working closely with development teams, security architects, and business stakeholders to protect our web, mobile, and cloud-based applications from emerging threats and vulnerabilities.
• Ensuring secure coding, vulnerability assessment, and application security testing, paired with a proactive mindset to stay ahead in the ever-evolving cybersecurity landscape.
• Integrate Security into the SDLC
• Conduct Security Assessments
• Identify and Mitigate Vulnerabilities
• Implement Security Tools
• Develop Security Policies and Standards
• Threat Modeling and Risk Assessments
• Incident Investigation and Response
• Stay Ahead of Emerging Threats
• Security Training and Awareness
• Remediation Planning

Essential Skills, Knowledge & Experiences:

• 3+ years of hands-on experience in application security, secure coding, or penetration testing.
• Deep understanding of security vulnerabilities, including familiarity with OWASP Top 10, SANS CWE, and the CVE database.
• Proficiency with security testing tools such as Veracode, OWASP, and ZAP.
• Experience with secure development frameworks and methodologies (e.g., DevSecOps, Agile).
• Strong communication skills can explain complex security concepts to technical and non-technical audiences alike.
• Relevant certifications (e.g., CISSP, CEH, OSCP, CSSLP) are highly desirable.

Total compensation package and benefits commensurate with the position. [1] Kelly Services | People (benefitsatkelly.com)

Kelly is an equal opportunity employer committed to employing a diverse, equitable, and inclusive workforce, including, but not limited to, race, gender, individuals with disabilities, protected veterans, sexual orientation, and gender identity. Equal Employment Opportunity is The Law.

References

Visible links

1. https://rs.benefitsatkelly.com/ ...Less