Application Security Engineer: DevSecOps & AI Security

Worky

Dallas (TX)

On-site

USD 120,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Hitachi Digital Services is seeking an Application Security Engineer to support secure software development, DevSecOps, and AI-enabled security initiatives. The role requires hands-on app security testing, vulnerability management, secure code reviews, and OWASP-based practices.

You will work with CI/CD pipelines to embed security controls and guide teams in secure-by-design approaches. Ideal candidates have 2+ years in application security, knowledge of OWASP Top 10/API Top 10, and experience

Qualifications

Minimum 2+ years in Application Security, DevSecOps, Secure Development, or Software Security.
Strong understanding of OWASP Top 10, Secure SDLC, Threat Modeling, API Security basics.
Familiarity with CI/CD platforms: Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CD.
Hands-on with SAST/DAST/SCA tools (Checkmarx, Veracode, Fortify, SonarQube, Burp/OWASP ZAP).
Knowledge of containers and Kubernetes security fundamentals; basic scripting (Python/PowerShell/JS/Java).

Responsibilities

Perform application security assessments for web, API, cloud-native, and AI-enabled apps.
Conduct secure code reviews and support remediation efforts.
Integrate security controls into CI/CD and DevSecOps workflows.
Analyze findings from SAST, DAST, SCA, container security, and secret scanning tools.
Participate in threat modeling and security design reviews.
Provide guidance on secure coding, OWASP Top 10, and OWASP API Top 10.
Collaborate with development teams to improve security posture and secure-by-design adoption.