AI-Driven AppSec Engineer for Secure DevOps

TalentHop; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

TalentHop is seeking an Application Security Engineer to maintain and enhance the security of its finance software platform. You’ll validate findings, guide remediation with engineering teams, and support security design throughout the SDLC, embedding automation to handle routine tasks and focus on impactful issues.

The role requires expertise in SAST/DAST/SCA tools, secure coding practices, and CI/CD/DevSecOps, with strong communication to technical and non-technical audiences.

Qualifications

• Bachelor’s degree plus 5+ years in application security, software development, or DevSecOps.
• Or MSc/MA in related field with 1+ year experience.
• Or Associate degree with 5+ years experience in relevant roles.
• Experience with SAST, SCA, DAST tools and triaging findings.
• Knowledge of secure coding practices and common vulnerabilities.
• Experience with AI tools or automation for security tasks.
• Familiarity with CI/CD and DevSecOps practices.
• Ability to communicate technical details to technical and non-technical audiences.

Responsibilities

• Triage and validate findings from application security tools, prioritizing by exploitability and risk.
• Collaborate with development teams to address vulnerabilities with practical guidance.
• Participate in security architecture reviews and threat modelling for new features.
• Integrate and optimize security tools within CI/CD pipelines.
• Utilize AI-assisted tools and automation to streamline repetitive security tasks.
• Develop scripts and tools to automate security workflows.
• Review SDLC and supply chain for security improvements.
• Manually validate findings when necessary to confirm impact.
• Track remediation progress and document security issues and trends.
• Contribute to secure development guidelines and developer education.
• Collaborate with the security team to enhance overall security posture.

Skills

Application security

Threat modelling

Secure coding

CI/CD DevSecOps

AI automation

Education

BSc/BA in CS/Engineering

MSc/MA in related field

Associate degree

Tools

Burp Suite

Python

Job description

TalentHop is seeking an Application Security Engineer to maintain and enhance the security of its finance software platform. You’ll validate findings, guide remediation with engineering teams, and support security design throughout the SDLC, embedding automation to handle routine tasks and focus on impactful issues.

The role requires expertise in SAST/DAST/SCA tools, secure coding practices, and CI/CD/DevSecOps, with strong communication to technical and non-technical audiences.