Application Security Engineer: DevSecOps & Cloud

Purpose Brands Intermediate, LLC; North Carolina; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Hybrid work environment

Life and disability insurance

Unlimited PTO + holidays

Flexible Fridays

401(k) match 4%

Wellness programs

Professional development

Gym facilities on-site

Job summary

Purpose Brands is seeking an Application Security Engineer to advance security across cloud-based applications in AWS and Azure. You will embed security controls into the SDLC, perform SAST/DAST/SCA, and collaborate with software engineering, DevOps, and cloud teams to mature vulnerability remediation workflows.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement within a DevSecOps model.

Qualifications

• 3–5 years of experience in application security or related field.
• Hands-on experience with code reviews and application security testing across modern languages, frameworks, and APIs.
• Experience with SAST, DAST, and dependency scanning tools like GitHub Dependabot or equivalent.

Responsibilities

• Embed application security into the SDLC across cloud-based applications.
• Develop security controls and automate security testing in CI/CD pipelines.
• Tune security tooling to reduce false positives.
• Collaborate with software engineering, DevOps, and cloud teams to improve vulnerability remediation.
• Assist in security investigations and risk management activities.

Skills

Code reviews

SAST/DAST

CI/CD pipelines

DevSecOps

Cloud security

Threat modeling

Vulnerability remediation

OWASP Top 10

Security tooling

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or related field

Tools

GitHub Advanced Security

Syft

Clair

Qualys

Job description

Purpose Brands is seeking an Application Security Engineer to advance security across cloud-based applications in AWS and Azure. You will embed security controls into the SDLC, perform SAST/DAST/SCA, and collaborate with software engineering, DevOps, and cloud teams to mature vulnerability remediation workflows.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement within a DevSecOps model.