Application Security Engineer (AppSec, DevSecOps)

IDR; Atlanta (GA); Presencial; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, vision, dental

ESOP

Life insurance

Career growth opportunities

Descripción de la vacante

gobravvo is seeking an experienced Application Security Engineer (AppSec/DevSecOps) to strengthen our security posture across Salesforce, .NET, and Azure App Services. You will embed security throughout the SDLC, work with developers and IT stakeholders, and promote secure coding practices.

You will lead DevSecOps initiatives, manage security tools, and perform penetration testing to deliver secure, high-quality software products with strong governance and training across teams.

Formación

• 7+ years of experience in Application Security/DevSecOps.
• Secure coding and code review expertise, especially with .NET and Salesforce/Apex.
• Experience with Salesforce security architecture and access controls.
• Background integrating security tools into Git and Azure DevOps CI/CD.
• Hands-on with SAST, DAST, SCA, and container security practices.

Responsabilidades

• Design and evolve application security and DevSecOps programs.
• Integrate security controls into CI/CD pipelines and workflows.
• Lead penetration testing and vulnerability assessments.
• Oversee SAST/DAST tooling and processes.
• Collaborate with development teams to promote secure coding.
• Deliver security training and awareness across the organization.

Conocimientos

Secure coding

Code review

Salesforce security

.NET

Git workflows

Azure DevOps

SAST

DAST

SCA

Container security

Herramientas

Salesforce Apex

Descripción del empleo

The Application Security Engineer (AppSec, DevSecOps) plays a pivotal role in strengthening the security posture of organizational software and platforms. This position is centered around implementing and managing robust security frameworks for applications developed across environments such as Salesforce, .NET, and Azure App Services. As an integral member of a dynamic security team, the Application Security Engineer ensures that security is embedded throughout the software development lifecycle, from initial design to deployment and maintenance. This role involves collaborating closely with developers, security professionals, and IT stakeholders to cultivate a culture of secure coding and application integrity.

By joining our team as an Application Security Engineer (AppSec, DevSecOps), you will lead efforts to develop, enhance, and maintain advanced DevSecOps practices. The position requires a proactive approach to identifying vulnerabilities, managing security tools, and performing comprehensive penetration testing. Your expertise will directly contribute to the development of secure, high-quality software products, and your influence will help shape security policies and procedures organization-wide. The role also requires a strong focus on integrating security controls and tools into CI/CD pipelines, thereby ensuring that security considerations are prioritized at every stage of the development process.

In addition to technical leadership, the Application Security Engineer (AppSec, DevSecOps) will be responsible for training software developers, promoting awareness of security best practices, and assisting in the remediation of security issues. Your work will be critical in ensuring compliance with industry standards and regulatory requirements, safeguarding sensitive data, and maintaining customer trust. Working within a supportive and innovative environment, you will find ample opportunities for professional growth, skill development, and career advancement.

Application Security Engineer (AppSec, DevSecOps) - Summary

• Lead application security initiatives across various platforms, focusing on secure software development and deployment.
• Integrate security practices within DevSecOps pipelines to ensure continuous and automated security checks.
• Collaborate with cross-functional teams to identify, remediate, and prevent vulnerabilities in software applications.
• Promote a culture of security awareness and best practices organization-wide.

Duties & Responsibilities

• Design, build, and implement the organization's application security and DevSecOps programs.
• Integrate application security controls into CI/CD (Continuous Integration/Continuous Deployment) pipelines and software development workflows.
• Facilitate and manage penetration testing and vulnerability assessment processes to identify and address security risks.
• Implement and oversee static (SAST) and dynamic (DAST) application security testing tools and processes.
• Manage the full lifecycle of application security, from initial assessment through to remediation of security issues.
• Partner with development teams to provide guidance on secure coding practices and application security frameworks.
• Deliver training and establish best practices for secure coding and application security awareness across the organization.

Salary & Benefits

• Competitive compensation packages commensurate with experience and expertise.
• Comprehensive benefits including medical, vision, and dental coverage.
• Access to an Employee Stock Ownership Program (ESOP) and life insurance options.
• Opportunity to join an industry-leading organization with a reputation for excellence.
• Dedicated engagement management to support your professional journey and ensure your success.
• Recognition as a ClearlyRated's Best of Staffing® Client and Talent Award winner for 12 consecutive years, reflecting a commitment to employee satisfaction.

Qualifications & Requirements

• 7+ years of experience in Application Security, DevSecOps, or related fields.
• Demonstrated expertise in secure coding and code review, particularly with .NET and Salesforce/Apex platforms.
• Proven experience with Salesforce security architecture, including security configuration and access controls.
• Background in integrating security tools into Git and Azure DevOps workflows within CI/CD environments.
• Hands-on proficiency with application security testing tools and methodologies, including SAST, DAST, SCA (Software Composition Analysis), and container security practices.

Ideal Candidate Snapshot

• A strategic thinker with a deep understanding of application security and DevSecOps principles.
• Excellent communicator, capable of conveying complex security concepts to technical and non-technical audiences.
• Strong collaborator who thrives in a team environment and is committed to continuous learning.
• Proactive and detail-oriented, with a track record of successfully managing security projects from inception to completion.
• Passionate about driving security initiatives and fostering a culture of security awareness.

Other Relevant Information

• By joining our team, you will have the opportunity to contribute to meaningful security initiatives and make a tangible impact on the safety of our organization's digital assets.
• The company is dedicated to supporting your growth through ongoing training, mentorship, and career development opportunities.
• Enjoy working in a collaborative environment that values innovation, diversity, and inclusion.
• This position offers the chance to work with cutting-edge technologies and contribute to critical security projects in a high-performing team.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. IDR is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite employees to voluntarily self-identify their race or ethnicity, gender, and veteran status (if applicable). Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable laws, executive orders, and regulations, including those that require the information to be summarized and reported to the federal government for civil rights enforcement. You may access this formhere.