Application Security Engineer

CyberBlade; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

CyberBlade is seeking an Application Security Engineer to secure clients' applications across the software lifecycle, from design through deployment, with a focus on reducing risk in web, mobile, and API workloads. This role is remote from the United States and reports to Head of Security Operations.

You will perform manual and automated reviews, conduct security testing, practice threat modeling, and collaborate with DevSecOps to embed security into CI/CD.

Qualifications

• Proven security experience across web and mobile apps with OWASP risks.
• Hands-on pentesting with Burp Suite, ZAP, and fuzzers.
• Experience with threat modeling and risk assessment in architectures.
• Ability to integrate security into CI/CD pipelines and DevSecOps.

Responsibilities

• Identify vulnerabilities in the software lifecycle from design to deployment.
• Conduct manual and automated source code reviews to improve security.
• Collaborate with DevOps to secure CI/CD and automate testing.
• Train developers on secure coding practices and OWASP Top 10.

Skills

AppSec expertise

Vulnerability assessment

Threat modeling

CI/CD security

Cloud security

Scripting (Python)

Tools

Burp Suite

OWASP ZAP

SAST/DAST tools

Fuzzing tools

Job description

Location Remote Department Offensive Security Reports to Head of Security Operations

As an Application Security Engineer at CyberBlade, you secure our clients' applications by finding, analyzing and fixing risks across the software lifecycle,from design through deployment.

Conduct manual and automated source code reviews to identify vulnerabilities and recommend security improvements.

Perform security testing on web, mobile and API applications, simulating real-world attacks to uncover weaknesses.

Threat Modeling

Analyze application architecture and design to proactively identify potential security risks and provide mitigation strategies.

DevSecOps and Security Automation

Collaborate with DevOps teams to integrate security tools and processes into CI/CD pipelines for continuous testing and compliance.

Security Training and Awareness

Guide and train developers on secure coding practices, common vulnerabilities such as the OWASP Top 10, and secure development principles.

Vulnerability Management, Tooling and Incident Support

Track, prioritize and help remediate vulnerabilities, build or improve security tooling, and assist in investigating application security incidents.

Required Qualifications

What we are looking for

• Application security expertise. Proven experience securing web and mobile applications, with a deep understanding of vulnerabilities such as SQL injection, XSS, CSRF and SSRF.
• Penetration testing and security tools. Hands-on experience with Burp Suite, ZAP, SAST and DAST solutions, and fuzzing tools.
• Threat modeling and risk assessment. Experience performing threat modeling and assessing risk in application architectures.
• DevSecOps and CI/CD integration. Familiarity integrating security tools into DevOps workflows using GitHub Actions, Jenkins, GitLab CI/CD or Azure DevOps.
• Cloud security knowledge. Experience securing applications deployed on AWS, Azure or Google Cloud.
• Scripting and automation. Ability to develop scripts or tools in Python, Bash or PowerShell to automate security tasks.

Ready when you are

Let's put your defenses to the test.

Whether you are a CEO or an individual in a home office, we keep pricing fairand stay in your corner long after the engagement ends. Tell us what you are protecting.