AI-Driven AppSec Engineer - Hybrid (NY/Charlotte)

BBG Ventures, LLC; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, and 401k (no match)

Job summary

BBG Ventures, LLC is seeking a Technical Application Security Engineer on a 6-month contract-to-hire basis. The role is hybrid in New York, NY or Charlotte, NC, and requires leading AppSec tooling across CI/CD pipelines.

You will implement AI-assisted triage workflows, define secure SDLC requirements, and partner with product leaders to operationalize security without slowing delivery. Candidates should have 7+ years in app security, hands-on with tools like Semgrep, Snyk, and GitHub Advanced

Qualifications

• 7+ years in application security with cross-brand experience.
• Hands-on with modern AppSec tooling and integrations across CI/CD.
• Strong coding in multiple languages and API integrations.

Responsibilities

• Inventory and map applications across business units with risk tiering.
• Operate AppSec tooling (SAST, SCA, secrets scanning, container/IaC) in CI/CD.
• Design AI-assisted triage workflows to reduce noise for developers.
• Define secure SDLC requirements and threat modeling practices.
• Partner with development leaders to operationalize AppSec across teams.
• Contribute to AI security strategy and evaluate new tooling.
• Produce executive metrics linking AppSec activities to risk reduction.

Skills

AppSec expertise

Multi-team influence

Automation scripting

Threat modeling

CI/CD integration

API integrations

Tools

Semgrep

Snyk

Checkmarx

Veracode

Apiiro

GitHub Advanced Security

Ox Security

Job description

BBG Ventures, LLC is seeking a Technical Application Security Engineer on a 6-month contract-to-hire basis. The role is hybrid in New York, NY or Charlotte, NC, and requires leading AppSec tooling across CI/CD pipelines.

You will implement AI-assisted triage workflows, define secure SDLC requirements, and partner with product leaders to operationalize security without slowing delivery. Candidates should have 7+ years in app security, hands-on with tools like Semgrep, Snyk, and GitHub Advanced