Application Security Engineer

Franklin Fitch; New York (NY); On-site; USD 130,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in New York is looking for a skilled security professional to enhance application security in software development. This role involves collaboration with development teams, conducting security assessments, and implementing best practices to mitigate vulnerabilities. The ideal candidate has over 3 years of experience in application security, with proficiency in top security testing tools. The position requires 5 days of onsite presence in New York City.

Qualifications

• Over 3 years of experience in application security or software engineering with a strong security focus.
• Solid understanding of OWASP Top 10, secure coding practices, and modern web/mobile app architectures.
• Proficiency with security testing tools.

Responsibilities

• Partner with development teams to integrate security best practices across the SDLC.
• Conduct threat modeling, code reviews, and security assessments of applications and APIs.
• Build and maintain automated security testing into CI/CD pipelines.

Skills

Application security expertise

Secure coding practices

Communication skills

Collaboration

Tools

SAST

DAST

IAST

SCA

Docker

Kubernetes

AWS

Azure

GCP

Job description

Base pay range

$130,000.00/yr - $200,000.00/yr

Direct message the job poster from Franklin Fitch

In this role, you will be an integral part of the cybersecurity function, collaborating closely with software engineering, DevOps, and product teams. Your expertise will be crucial in identifying vulnerabilities, designing secure solutions, and embedding security practices throughout the software development lifecycle.

US | Executive search, Cyber, Risk & Information Security in the Financial Service, Insurance and Legal sectors

Responsibilities

• Partner with development teams to integrate security best practices across the SDLC.
• Conduct threat modeling, code reviews, and security assessments of applications and APIs.
• Build and maintain automated security testing into CI/CD pipelines.
• Collaborate with engineering teams to remediate vulnerabilities and drive secure coding practices.
• Stay ahead of emerging security threats, vulnerabilities, and industry trends.
• Contribute to security standards, policies, and developer training initiatives.

Ideal Candidate Profile

• Over 3 years of experience in application security or software engineering with a strong security focus.
• Solid understanding of OWASP Top 10, secure coding practices, and modern web/mobile app architectures.
• Proficiency with security testing tools (SAST, DAST, IAST, SCA).
• Familiarity with cloud environments (AWS, Azure, or GCP) and container security (Docker, Kubernetes).
• Excellent communication and collaboration skills.

Please note this position requires 5 days of onsite presence in New York City.