Application Security Engineer: Build Secure Pipelines & Supply Chain

Saronic Technologies Inc.; Town of Texas (WI); On-site; USD 120,000 - 150,000; Full time

Job summary

Saronic Technologies is seeking a Security Engineer for Application Security to lead secure software practices across product, cloud, and on‑prem environments. You will own threat modeling, secure design reviews, and implement guardrails to accelerate development without compromising safety.

Join a team that partners with Software, DevOps, and Platform Engineering to secure the SDLC, manage software supply chains, secrets, and self-hosted deployments on AWS/Azure. This role may require U.S.

Qualifications

• 5+ years in application security, DevSecOps, or product security.
• Hands-on secure SDLC: threat modeling, secure code review, and SAST/DAST/SCA in CI/CD.
• Software supply-chain security (SCA/SBOM/signing) and secrets management.
• Experience securing the deployment and self-hosting of applications (hardened images, isolation, identity, patching, monitoring).
• Comfortable with scripting and Infrastructure-as-Code to build durable tooling.
• Ability to obtain and maintain a U.S. security clearance.

Responsibilities

• Secure SDLC & DevSecOps: Run threat modeling and secure design and code reviews for new and existing systems.
• Software Supply Chain: Own dependency and supply-chain security, SBOMs, signing and provenance.
• Secrets & Application Controls: Govern secrets management and data-loss-prevention controls.
• Secure Self-Hosting Infrastructure: Design and harden infrastructure for self-hosted deployments across platforms.
• Partnership: Collaborate with engineering teams to scale security across the org.

Skills

Threat modeling

Secure SDLC

SAST/DAST/SCA

SBOM

Secrets management

Self-hosting

Cloud security

Job description

Saronic Technologies is seeking a Security Engineer for Application Security to lead secure software practices across product, cloud, and on‑prem environments. You will own threat modeling, secure design reviews, and implement guardrails to accelerate development without compromising safety.

Join a team that partners with Software, DevOps, and Platform Engineering to secure the SDLC, manage software supply chains, secrets, and self-hosted deployments on AWS/Azure. This role may require U.S.