Application Security Engineer & DevSecOps Advisor

Ascensus; Florida; On-site; USD 110,000 - 160,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to lead the application security program and partner with scrum teams to embed secure development practices. The role emphasizes data protection, risk-based decisions, and collaboration with the Head of Technology and Information Security leadership.

You will perform architecture reviews, threat modeling, and penetration testing support while deploying SAST/DAST and SCA tooling.

Qualifications

• 4+ years in Secure Software Development/DevSecOps.
• Ability to define software security requirements.
• Knowledge of threat modeling and risk mitigation.
• Experience integrating security into SDLC and CI/CD.
• Familiarity with SAST/DAST and SCA tooling.
• Hands-on security testing using Burp Suite, ZAP or similar.
• Understanding OWASP Top 10 and related risks.
• Experience with cloud and API security controls.

Responsibilities

• Protect confidential data and ensure secure handling.
• Develop a comprehensive DevSecOps approach across SDLC.
• Provide security consultation to scrum teams and developers.
• Integrate security requirements into sprint planning.
• Conduct architecture reviews and threat modeling.
• Support SAST/DAST/SCA tooling deployment and triage findings.
• Mentor engineers on secure development practices.

Skills

Secure Software Development

DevSecOps

Threat Modeling

CI/CD Security

SAST/DAST

OWASP Top 10

Security Testing Tools

Network & App Security

Security Architecture

.NET/Java Experience

Tools

Burp Suite

Fiddler

ZAP

Wireshark

Metasploit

Nessus

Qualys

Job description

Ascensus is seeking an Application Security Engineer to lead the application security program and partner with scrum teams to embed secure development practices. The role emphasizes data protection, risk-based decisions, and collaboration with the Head of Technology and Information Security leadership.

You will perform architecture reviews, threat modeling, and penetration testing support while deploying SAST/DAST and SCA tooling.