Application Security Engineer

TalentHop; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

TalentHop is seeking an Application Security Engineer to maintain and enhance the security of its finance software platform. You’ll validate findings, guide remediation with engineering teams, and support security design throughout the SDLC, embedding automation to handle routine tasks and focus on impactful issues.

The role requires expertise in SAST/DAST/SCA tools, secure coding practices, and CI/CD/DevSecOps, with strong communication to technical and non-technical audiences.

Qualifications

• Bachelor’s degree plus 5+ years in application security, software development, or DevSecOps.
• Or MSc/MA in related field with 1+ year experience.
• Or Associate degree with 5+ years experience in relevant roles.
• Experience with SAST, SCA, DAST tools and triaging findings.
• Knowledge of secure coding practices and common vulnerabilities.
• Experience with AI tools or automation for security tasks.
• Familiarity with CI/CD and DevSecOps practices.
• Ability to communicate technical details to technical and non-technical audiences.

Responsibilities

• Triage and validate findings from application security tools, prioritizing by exploitability and risk.
• Collaborate with development teams to address vulnerabilities with practical guidance.
• Participate in security architecture reviews and threat modelling for new features.
• Integrate and optimize security tools within CI/CD pipelines.
• Utilize AI-assisted tools and automation to streamline repetitive security tasks.
• Develop scripts and tools to automate security workflows.
• Review SDLC and supply chain for security improvements.
• Manually validate findings when necessary to confirm impact.
• Track remediation progress and document security issues and trends.
• Contribute to secure development guidelines and developer education.
• Collaborate with the security team to enhance overall security posture.

Skills

Application security

Threat modelling

Secure coding

CI/CD DevSecOps

AI automation

Education

BSc/BA in CS/Engineering

MSc/MA in related field

Associate degree

Tools

Burp Suite

Python

Job description

The organization operates in the finance software industry, focusing on providing solutions that enhance the efficiency, clarity, and confidence of finance organizations worldwide. It addresses challenges in financial consolidation and reporting by offering a platform designed to modernize finance operations and support faster, clearer decision-making.

About the Opportunity:

The APPLICATION SECURITY ENGINEER role is responsible for maintaining and enhancing the security of the organization's platform. The position involves validating security findings, collaborating with engineering teams to implement effective remediation, and supporting security design and threat assessments throughout the software development lifecycle. This role plays a critical part in protecting the platform and its users by integrating security practices and automation to handle routine tasks and focus on impactful security issues.

Responsibilities:

• Triage and validate findings from application security tools, prioritizing by exploitability and risk
• Collaborate with development teams to address vulnerabilities with practical guidance
• Participate in security architecture reviews and threat modelling for new features
• Integrate and optimize security tools within CI/CD pipelines
• Utilize AI-assisted tools and automation to streamline repetitive security tasks
• Develop scripts and tools to automate security workflows
• Review software development lifecycle and supply chain for security improvements
• Manually validate findings when necessary to confirm impact
• Track remediation progress and document security issues and trends
• Contribute to secure development guidelines and developer education
• Collaborate with the security team to enhance overall security posture

Requirements:

• BSc/BA in Computer Science, Engineering, or related field with 5+ years in application security, software development, or DevSecOps OR
• MSc/MA in related field with 1+ year experience OR
• Associate degree with 5+ years experience in relevant roles
• Experience with application security tools (SAST, SCA, DAST) and triaging findings
• Knowledge of secure coding practices and common vulnerabilities
• Experience with AI tools or automation for security tasks
• Familiarity with CI/CD and DevSecOps practices
• Ability to communicate technical details to technical and non-technical audiences

Preferred Qualifications:

• Experience with C# and .NET code
• Familiarity with threat modelling methodologies
• Exposure to tools like Burp Suite
• Understanding of security risk management and compliance standards
• Relevant security certifications (e.g., CompTIA Security+, CSSLP, GSSP-.NET)

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Equal Opportunity Statement:

Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.