Application Security Engineer

Addison Group; Oklahoma City (OK); On-site; USD 115,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Addison Group in Oklahoma City is seeking an Application Security Engineer to strengthen application testing, embed security checks in development workflows, and support incident response and vulnerability management. The role blends hands-on security assessments with automation and process improvements.

The team focuses on reducing risks across applications, expanding forensics capabilities, and evolving security practices, with a hands-on approach and collaboration with engineering teams.

Qualifications

• At least five years of relevant experience; seven+ preferred.
• Experience with SAST and DAST.
• Familiarity with OWASP Top 10 and secure testing methods.
• Understanding CIA triad and security fundamentals.
• Experience embedding security testing in CI/CD pipelines.
• Ability to clearly explain findings to engineers.
• Experience in digital forensics, incident response or vulnerability management is a plus.

Responsibilities

• Incorporate application scanning tools into CI/CD workflows for automated security testing.
• Analyze scan results, validate weaknesses, and perform hands-on assessments.
• Partner with engineering to prioritize findings and guide remediation.
• Investigate security events and contribute to forensics, containment and recovery.
• Evaluate vulnerabilities and support remediation actions.
• Improve testing procedures and security workflows as the program matures.
• Apply security frameworks for consistent app assessments.
• Contribute to AI security testing initiatives.

Skills

CI/CD integration

Security testing

Threat analysis

Education

No degree required

Tools

SAST

DAST

Job description

Job Title: Application Security Engineer

Direct Hire: Must be authorized to work in the United States now and in the future without assistance.

Pay: $115,000–$140,000 annually, plus a 16% target bonus

Work Schedule: Full-time. Onsite 3 times a week.

Benefits: This position is eligible for medical, dental, vision, and 401(k).

Join a security team working to strengthen application testing, expand automation, and improve incident response capabilities. This role requires a hands‑on professional who can assess application risks, embed security checks into development workflows, and help refine operational practices.

The anticipated scope includes approximately 40% application security, 40% digital forensics and incident response, and 20% vulnerability management.

Key Responsibilities:

• Incorporate application scanning tools into CI/CD workflows to support automated, repeatable security testing.
• Analyze scan results, validate potential weaknesses, and conduct additional hands‑on application assessments.
• Partner with engineering teams to prioritize security findings and guide corrective action.
• Investigate security events and contribute to forensic examinations, incident containment, and recovery efforts.
• Evaluate vulnerabilities, determine their potential impact, and support remediation activities.
• Improve testing procedures and operational workflows as the security program evolves.
• Apply established security frameworks to maintain consistent assessments across applications.
• Contribute to emerging initiatives involving AI security testing and AI harness development.

Qualifications:

• At least five years of relevant professional experience; seven or more years preferred.
• Practical experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Working knowledge of the OWASP Top 10 and structured application security testing methods.
• Understanding of confidentiality, integrity, and availability—the foundational principles of the CIA triad.
• Experience adding security testing and automation to CI/CD pipelines.
• Ability to explain technical findings and collaborate with software engineering and security teams.
• Demonstrated ability to improve processes and work independently through technical challenges.
• Exposure to digital forensics, incident response, and vulnerability management is valuable.
• Experience or interest in AI security testing and harness development is a plus.
• No degree is required. Relevant hands‑on experience and certifications will be considered.