Application Security Engineer

The Amatriot Group; City of Rensselaer (NY); On-site; USD 90,000 - 110,000; Full time

Job summary

The Amatriot Group in Albany, NY is seeking an Application Security Engineer to deliver secure software solutions for state health projects. You will collaborate with development teams to identify vulnerabilities and implement remediation within the SDLC.

You will work on risk-based assessments, dynamic/static scanning, and educate teams on security best practices while staying current with industry trends.

Qualifications

• 8+ years information technology experience.
• Experience integrating AI-driven code analysis into CI/CD pipelines to identify vulnerabilities before deployment.
• Assessing new code commits, pull requests, and architecture changes for vulnerabilities and compliance risks.
• 3+ years in application security engineering including assessments, penetration tests, and tool implementations (dynamic/static scanning).
• Java/Web development background with secure coding in RHEL/JBoss; 5+ years as developer/architect.

Responsibilities

• Join development team working on multi-tier architecture and SOA.
• Diagnose, document, and remediate application security vulnerabilities; ensure security checkpoints in SDLC.

Skills

Communication

Critical thinking

Problem solving

Analytical skills

Collaboration

Education

Bachelor’s degree in Computer Science

Tools

Fortify

SonarQube

Job description

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary
  

Location:

Albany, NY

Security Clearance:

No clearance needed

Job Type:

Full-Time

Target Salary Range*:

$90,000-110,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary
  

Position Overview

Deliver simple solutions to complex problems as an Application Security Engineer. Your work will have you fully immersed in our client’s domain in order to deliver solutions for their complex needs. You’ll prioritize the client while we prioritize your career.

You will join our team in partnership with New York State of Health (NYSoH) to provide comprehensive health coverage to more than 7.2 million New Yorkers through its Health Benefit Exchange (HBE)

Key Responsibilities

• You’ll join our talented Development Team. Our project is built on a multi-tier architecture including Service Oriented architecture, multi-tier web applications using Java and various other COTS products.
• Work closely with development teams to diagnose, document, and remediate application security vulnerabilities and identify appropriate security checkpoints in SDLC.
• Perform risk-based, technical assessments/penetration tests of applications, using dynamic and static scanning tools, and audits ensuring compliance with industry standards
• Consult with Development leadership on application development training.
• Research new attack vectors and stay current with cybersecurity news and trends.

Qualifications:

Education

Bachelor’s degree in Computer Science, or related technical field, OR equivalent combination of education and experience

Required Experience

• 8+ years Information Technology.
• Hands‑on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings — while providing clear, concise status updates and risk reporting to leadership and stakeholders.
• Hands‑on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.
• Hands‑on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.
• 3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.
• Java/Web development with strong secure coding background in RHEL and JBoss.
• 5+ years in software development role as a Developer, or Architect

Skills

• Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues, and management.
• Critical thinking and creative problem solving
• Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.
• Strong analytical skills.
• Demonstrated collaboration and teaching abilities.

Preferred Qualifications:

• CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications