Application Engineer

Collabera; Plano (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

Collabera is seeking a Sr. Application Security Engineer in Plano, TX. The role involves partnering with developers across the Secure SDLC, integrating AppSec tooling into GitHub workflows, and hands-on work with SAST, DAST, and SCA.

You will configure security checks and remediation prioritization, and guide developers on fixes and threat modeling. Ideal candidates have 5–7+ years in cyber security with 3+ years in AppSec, plus experience with AI security in development contexts.

Qualifications

• 5–7+ years of cyber security/IT experience with 3+ years in app security.
• Hands-on experience with SAST, DAST, SCA and secure SDLC.
• Experience integrating security tooling in GitHub/GitHub Actions.
• Vulnerability triage, remediation, and risk prioritization.
• Developer-facing AppSec experience with code-level fixes.
• AI security experience related to AppSec or automation.

Responsibilities

• Partner closely with developers throughout the Secure SDLC.
• Integrate and configure AppSec tooling within GitHub/GitHub Actions workflows.
• Work hands-on with SAST, DAST, and SCA tools.
• Configure security scanning, checks, policies, and risk-based gates within developer workflows.
• Review findings, validate vulnerabilities and false positives, prioritize risk, and drive remediation through closure.
• Work directly with developers to troubleshoot vulnerabilities, explain root cause, recommend code-level fixes, and validate remediation.
• Identify AppSec gaps and independently develop technical solutions.
• Support AI-assisted development security, threat modeling, vulnerability triage, and security automation.

Skills

AppSec engineering

SAST

DAST

SCA

GitHub Actions

Vulnerability triage

Developer collaboration

AI security

Tools

GitHub

Job description

Title - Sr. Application Security Engineer

Salary: $140,000 -$180,000 + 15% annual bonus

DAY TO DAY

• Partner closely with developers throughout the Secure SDLC.
• Integrate and configure AppSec tooling within GitHub/GitHub Actions workflows.
• Work hands-on with SAST, DAST, and SCA tools.
• Configure security scanning, checks, policies, and risk-based gates within developer workflows.
• Review findings, validate vulnerabilities and false positives, prioritize risk, and drive remediation through closure.
• Work directly with developers to troubleshoot vulnerabilities, explain root cause, recommend code-level fixes, and validate remediation.
• Identify AppSec gaps and independently develop technical solutions.
• Support AI-assisted development security, threat modeling, vulnerability triage, and security automation.

MUST HAVES

• 5-7+ years of Cyber Security/IT experience, including 3+ years of recent hands-on Application Security engineering.
• Strong hands-on experience with SAST, DAST, SCA, Secure SDLC, and DevSecOps.
• Hands-on experience integrating and configuring security tooling within GitHub/GitHub Actions and developer workflows.
• Strong vulnerability triage and remediation experience, including validating findings, false positives, prioritizing risk, and driving issues through closure.
• Strong developer-facing AppSec experience, including troubleshooting vulnerabilities, explaining root cause, and recommending code-level fixes.
• Meaningful hands-on AI security experience related to AppSec, AI-assisted development, threat modeling, vulnerability management, or security automation

PLUSSES

• Agentic-code security experience — securing AI coding agents, agent-generated code, or agentic development workflows.
• Python scripting/automation — personally writing Python to automate AppSec or security processes.
• AI-assisted code review, threat modeling, vulnerability triage, or remediation.
• Built automation around security findings, developer workflows, or vulnerability management.
• GitHub Advanced Security / GitHub-native security tooling experience. Cloud, API, Kubernetes/container, or IaC security experience.

This is a direct hire opportunity. The selected candidate will be employed directly by our client. All compensation and benefits, including but not limited to medical insurance, retirement plans, paid time off, and other perks, will be provided by the client in accordance with their internal policies and subject to applicable laws and eligibility requirements.