Application Security Engineer: Cloud & DevSecOps (Hybrid)

Socket.dev; Richmond (VA); Hybrid; USD 78,000 - 117,000; Full time

Benefits offered by this job

Healthcare Coverage

401(k) Savings

Paid Time Off

Tuition Reimbursement

Wellness Support

Life Insurance

Job summary

Genworth is seeking an Application Security Engineer to manage security across on-premises and cloud environments. The role focuses on providing application security services, supporting internal partners, and ensuring adherence to policies with 3+ years in security engineering, DevSecOps, and cloud security.

You will work in a hybrid Richmond/Lynchburg, VA environment with core hours, collaborating with senior engineers to strengthen the security posture and secure SDLC practices.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• Experience with vulnerability scanning technologies and AST platforms.
• Formal experience with threat modelling.
• Experience leading projects and teams.
• Knowledge of SOC2, ISO27001, NIST 800-53 controls.
• Ability to automate tasks and code solutions.

Responsibilities

• Operate and maintain application vulnerability scanning tools and AST platforms.
• Collaborate with developers and stakeholders to identify and remediate vulnerabilities.
• Support security investigations and remediation activities.
• Administer security tools and automation platforms.
• Participate in security assessments, threat modeling, and risk reduction.
• Generate reports and dashboards showing security posture and KRIs.
• Support CI/CD security reviews and remediation tracking.
• Evaluate and implement security tools, processes, and technologies.

Skills

Threat modeling

DevSecOps

Cloud security (AWS/Azure/GCP)

Vulnerability scanning

CI/CD security reviews

Programming/scripting (Java, Python, C

Education

Computer Science or similar degree

Tools

AWS

Azure

GCP

Job description

Genworth is seeking an Application Security Engineer to manage security across on-premises and cloud environments. The role focuses on providing application security services, supporting internal partners, and ensuring adherence to policies with 3+ years in security engineering, DevSecOps, and cloud security.

You will work in a hybrid Richmond/Lynchburg, VA environment with core hours, collaborating with senior engineers to strengthen the security posture and secure SDLC practices.