Application Engineer

Collabera; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Collabera in Plano, TX seeks an experienced Application Security Engineer to strengthen software security across the SDLC. You will apply SAST/DAST/SCA, integrate security tooling into GitHub workflows, and mentor developers on secure coding practices.

Candidates should have 5-7+ years in Cyber Security/IT with hands-on AppSec experience and a track record in vulnerability triage, remediation, and AI security relevance.

Qualifications

• 5-7+ years in Cyber Security/IT with 3+ years hands-on AppSec experience.
• Strong hands-on with SAST, DAST, SCA, Secure SDLC, and DevSecOps.
• Experience integrating security tooling in GitHub/GitHub Actions and developer workflows.
• Vulnerability triage and remediation experience, incl. root cause analysis and fixes.
• Hands-on AI security experience related to AppSec, AI-assisted development or threat modeling.

Responsibilities

• Drive security in the software development lifecycle using AppSec best practices.
• Lead triage, prioritize risk, and coordinate remediation of findings.
• Explain root causes to engineers and guide code-level fixes.

Skills

Cyber Security

AppSec

SAST

DAST

SCA

DevSecOps

GitHub Actions

AI security

Tools

GitHub Advanced Security

Kubernetes security

Cloud security

Job description

• 5-7+ years of Cyber Security/IT experience, including 3+ years of recent hands-on Application Security engineering.
• Strong hands-on experience with SAST, DAST, SCA, Secure SDLC, and DevSecOps.
• Hands-on experience integrating and configuring security tooling within GitHub/GitHub Actions and developer workflows.
• Strong vulnerability triage and remediation experience, including validating findings, false positives, prioritizing risk, and driving issues through closure.
• Strong developer-facing AppSec experience, including troubleshooting vulnerabilities, explaining root cause, and recommending code-level fixes.
• Meaningful hands-on AI security experience related to AppSec, AI-assisted development, threat modeling, vulnerability management, or security automation

Plusses:

• Agentic-code security experience — securing AI coding agents, agent-generated code, or agentic development workflows.
• Python scripting/automation — personally writing Python to automate AppSec or security processes.
• AI-assisted code review, threat modeling, vulnerability triage, or remediation.
• Built automation around security findings, developer workflows, or vulnerability management.
• GitHub Advanced Security / GitHub-native security tooling experience. Cloud, API, Kubernetes/container, or IaC security experience.

This is a direct hire opportunity. The selected candidate will be employed directly by our client. All compensation and benefits, including but not limited to medical insurance, retirement plans, paid time off, and other perks, will be provided by the client in accordance with their internal policies and subject to applicable laws and eligibility requirements.