App Security Engineer — DevSecOps & Secure SDLC (Remote)

GameChanger; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Unlimited vacation

Remote work

Health insurance

401K

Tech budget

Continued learning

Parental leave

Wellness

Other perks

Job summary

GameChanger is seeking a Security Engineer to join the InfoSec team as the primary security partner for our software engineering organization. You will embed security across the SDLC, champion secure design, and bring DevSecOps discipline to how we build and ship software, including being part of our weekly on-call rotation.

You will collaborate with platform, product, and architecture teams to define secure API patterns, perform secure code reviews, integrate security tooling into CI/CD, and

Qualifications

• 3+ years in application security engineering.
• Security-by-design in TypeScript, Swift, and/or Kotlin.
• Experience securing deployments in AWS with container and Kubernetes security, IaC scanning, and policy-as-code.
• Proven track record integrating security tooling into CI/CD pipelines.
• Ability to use AI/ML-driven security tools to enhance effectiveness.

Responsibilities

• Embed security into every phase of the SDLC.
• Champion secure design and DevSecOps practices.
• Perform secure code reviews with actionable remediation guidance.
• Define secure API patterns (REST and GraphQL).
• Maintain secure coding guidelines and security architectural patterns.
• Integrate and maintain security tooling across CI/CD and enforce security gates.
• Harden CI/CD components such as GitHub Actions and runners.
• Identify opportunities to leverage AI for security workflows.
• Operate vulnerability management lifecycle and triage findings by impact.
• Communicate security risk clearly to engineering and leadership.

Skills

Security-by-design

CI/CD security tooling

Threat modeling

AI/ML security tooling

Clear communication

Automation-first

Cross-functional collaboration

Education

AWS Certified Security Specialty

CKS / GMOB / GWEB

Tools

AWS

Kubernetes

Terraform

Policy-as-code

Job description

GameChanger is seeking a Security Engineer to join the InfoSec team as the primary security partner for our software engineering organization. You will embed security across the SDLC, champion secure design, and bring DevSecOps discipline to how we build and ship software, including being part of our weekly on-call rotation.

You will collaborate with platform, product, and architecture teams to define secure API patterns, perform secure code reviews, integrate security tooling into CI/CD, and