Application Security Engineer

Ringside Talent; Columbus (OH); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Ringside Talent is seeking an Application Security Engineer for a hybrid role based in Columbus, OH. You will embed security into the software development lifecycle, working closely with engineering teams to build safer software from the ground up.

You will identify and remediate vulnerabilities across web apps, APIs, mobile apps, and cloud environments, applying OWASP Top 10 and CWE knowledge to guide secure development practices.

Qualifications

• 3+ years of application security, product security, or related cybersecurity experience.
• Hands-on experience identifying and remediating vulnerabilities across web apps, APIs, mobile apps, and cloud environments.
• Strong understanding of OWASP Top 10, CWE, secure coding practices, and common attack vectors.
• Experience with SAST/DAST tools and embedding security testing into CI/CD and DevSecOps workflows.
• Strong communication skills, with the ability to influence developers without direct authority.
• Excellent analytical and problem-solving skills.

Responsibilities

• Identify, assess, and remediate vulnerabilities across web applications, APIs, mobile applications, and cloud environments.
• Apply knowledge of OWASP Top 10, CWE, and common attack vectors to guide secure development practices.
• Integrate SAST/DAST tools and application security testing into CI/CD and DevSecOps pipelines.
• Partner with developers and engineering teams to communicate risk and recommend remediation steps.
• Review code and architecture for security weaknesses and provide actionable guidance to development teams.
• Support secure coding training and best-practice adoption across engineering teams.
• Stay current on emerging vulnerabilities, attack techniques, and application security tooling.
• Contribute to incident response efforts related to application-level security issues.
• Help shape and mature the organization's overall application security program.

Skills

Application security

Vulnerability assessment

CI/CD security

OWASP Top 10

Security testing

Developer communication

Tools

SAST tools

DAST tools

OWASP ZAP

Burp Suite

Jenkins

Job description

We are looking for an Application Security Engineer to work for our client. The ideal candidate aligns with the responsibilities and qualifications outlined below.

This is a great opportunity for a security-minded engineer to embed strong security practices directly into the development lifecycle, working closely with engineering teams to build safer software from the ground up, in a hybrid role based in Columbus, OH.

Responsibilities

• Identify, assess, and remediate vulnerabilities across web applications, APIs, mobile applications, and cloud environments
• Apply knowledge of OWASP Top 10, CWE, and common attack vectors to guide secure development practices
• Integrate SAST/DAST tools and application security testing into CI/CD and DevSecOps pipelines
• Partner directly with developers and engineering teams to communicate risk and recommend practical remediation steps
• Review code and architecture for security weaknesses, providing actionable guidance to development teams
• Support secure coding training and best-practice adoption across engineering teams
• Stay current on emerging vulnerabilities, attack techniques, and application security tooling
• Contribute to incident response efforts related to application-level security issues
• Help shape and mature the organization's overall application security program

Qualifications

• 3+ years of application security, product security, or related cybersecurity experience
• Hands-on experience identifying and remediating vulnerabilities across web applications, APIs, mobile applications, and cloud environments
• Strong understanding of OWASP Top 10, CWE, secure coding practices, and common attack vectors
• Experience with SAST/DAST tools and embedding security testing into CI/CD and DevSecOps workflows
• Strong communication skills, with the ability to influence developers without direct authority
• Excellent analytical and problem-solving skills

What Our Client Offers

• A true seat within the engineering organization, not a siloed security function
• Direct influence over how security gets built into the SDLC from day one
• Exposure across web, mobile, API, and cloud security; not a single narrow surface area
• A development team that treats security recommendations as partnership, not friction