Application Security Engineer

Insight Global; Lansing (MI); A distancia; USD 120.000 - 150.000; Jornada completa

Descripción de la vacante

Insight Global is seeking an Application Security Engineer to partner with engineering, architecture, and DevOps teams to bake secure-by-design practices into the software development lifecycle. You will drive SAST/DAST, threat modeling, and remediation validation across cloud-native apps in a highly collaborative, mostly remote environment.

The ideal candidate has 5+ years in application security, hands-on SDLC support, and proficiency with Snyk/Dependabot, OWASP Top 10, and AWS integrations.

Formación

• 5+ years in application security or closely related discipline.
• 5+ years supporting secure SDLC activities and collaboration with software teams.
• Bachelor's degree in CS/InfoSec/SE or related field.

Responsabilidades

• Partner with engineering, architecture, and DevOps to integrate secure-by-design practices.
• Lead SAST/DAST, dependency analysis, threat modeling, and remediation validation.
• Mentor developers on remediation and communicate security risks effectively.

Conocimientos

Application security

Secure SDLC

SAST/DAST

Vulnerability management

DevOps collaboration

Web/API security

AWS security

Security guidance

OWASP Top 10

Communication

Educación

Bachelor's degree in computer science / information security / software engineering

Herramientas

Snyk

Dependabot

CI/CD tooling

Descripción del empleo

Job Description

A customer of Insight Global is looking to hire an Application Security Engineer to come onboard! This individual will partner closely with software engineering, architecture, application, and DevOps teams to integrate secure-by-design practices throughout the software development lifecycle. The role will focus on SAST, DAST, dependency analysis, secure code review, threat modeling, vulnerability prioritization, remediation validation, and the continued improvement of application security tooling. The ideal candidate can communicate technical security risks clearly, mentor developers on practical remediation, and balance security requirements with application-delivery needs in a highly collaborative remote environment.

Skills and Requirements

• 5+ years of experience in application security, secure software engineering, or a closely related application-focused security discipline.
• 5+ years of hands-on experience supporting secure SDLC activities, including code review, security testing, vulnerability remediation, and collaboration with software-development teams.
• Hands-on experience with SAST, DAST, software composition analysis, dependency scanning, and vulnerability-management workflows; experience with Snyk and Dependabot is strongly desired.
• Practical knowledge of web and API security, including the OWASP Top 10, authentication, authorization, secrets management, secure configuration, and common remediation techniques.
• Experience securing AWS-hosted applications and integrating AppSec controls into CI/CD pipelines and automated development workflows.
• Bachelor’s degree in computer science, information security, software engineering, or a related field.
• FinTech banking, mortgage servicing, or regulated financial-services experience.
• CISSP or CSSLP certification.
• Familiarity with React, Angular, Node.js, Java, or JavaScript.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].