Application Security Engineer — DevSecOps & AI

FSAStore.com; United States; On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401K with company match

Flexible PTO

Monthly wellness & internet reimburse"

Professional development

Job summary

FSAStore.com is seeking an Application Security Analyst to embed security into software development. This hands-on role will secure code, fix pipelines, manage security tools, and help with audits such as PCI, HIPAA, and HITRUST.

You'll work closely with engineering to build security into CI/CD pipelines, implement testing and runtime protections, and ensure AI/ML components are resilient against threats. This remote-first, US-focused team values practical security and rapid delivery.

Qualifications

• Minimum of 2+ years of experience in Application Security or Product Security.
• Hands-on experience with secure code scanning tools such as SCA and SAST.
• Strong knowledge of OWASP Top 10 vulnerabilities.
• Experience securing APIs and microservices.
• Familiarity with CI/CD pipelines.
• Basic understanding of AI/ML systems.

Responsibilities

• Perform application security assessments using SCA, SAST, Secrets management, and interactive testing tools.
• Identify, triage, and prioritize vulnerabilities.
• Integrate security testing into CI/CD pipelines (DevSecOps).
• Assess security risks in AI/ML-enabled applications, including model exposure and inference endpoints.
• Secure AI APIs, plugins, and third-party integrations.
• Tune security controls across technologies such as WAF, EDR, MDM, and cloud.
• Conduct threat modeling and secure design reviews for applications and AI use cases.
• Assess and harden identity and access flows ensuring least privilege.
• Automate repetitive security tasks so the team can focus on higher-value work.
• Partner with developers to remediate vulnerabilities and improve secure coding practices.
• Monitor and respond to security incidents as part of an on-call rotation.

Skills

SCA

SAST

Secrets management

Interactive testing

OWASP Top 10

API security

CI/CD pipelines

DevSecOps

Cloud security

AI/ML security

Tools

SAST tools

SCA tools

Threat modeling tools

Job description

FSAStore.com is seeking an Application Security Analyst to embed security into software development. This hands-on role will secure code, fix pipelines, manage security tools, and help with audits such as PCI, HIPAA, and HITRUST.

You'll work closely with engineering to build security into CI/CD pipelines, implement testing and runtime protections, and ensure AI/ML components are resilient against threats. This remote-first, US-focused team values practical security and rapid delivery.