Application Security Engineer — DevSecOps in the Cloud

Purpose Brands, LLC; Boca Raton (FL); Híbrido; USD 110.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, Dental and Vision Coverage

Hybrid Work Environment

Life and Disability Insurance

401(K) Savings Plan Matching

Mental Health Benefits

Descripción de la vacante

Purpose Brands, LLC is seeking an Application Security Engineer to strengthen security across AWS and Azure environments within a DevSecOps framework. You will embed security controls, automate testing, and collaborate with software, DevOps, and cloud teams to reduce risk without slowing delivery.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement across modern applications, with a strong focus on secure SDLC practices.

Formación

• Bachelor’s degree in a related field is required.
• 3–5 years of experience in application security or security engineering.
• Hands-on code reviews and security testing across modern languages, frameworks, and APIs.
• Experience with SAST, DAST, and dependency scanning tools.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience in AWS and/or Azure cloud environments and CI/CD workflows.

Responsabilidades

• Embed security across the SDLC and promote secure coding practices.
• Integrate security tooling into CI/CD pipelines for automated testing.
• Manage vulnerability findings and remediation workflows.
• Collaborate with engineering, DevOps, and cloud teams to mature security processes.
• Support governance, risk management, and compliance initiatives related to application security.

Conocimientos

Application security

SAST

DAST

OWASP Top 10

CI/CD

DevSecOps

Cloud security

Educación

Bachelor’s degree in Computer Science / Information Systems / Engineering

Herramientas

GitHub Advanced Security

Syft

Clair

Qualys

GitHub Dependabot

Descripción del empleo

Purpose Brands, LLC is seeking an Application Security Engineer to strengthen security across AWS and Azure environments within a DevSecOps framework. You will embed security controls, automate testing, and collaborate with software, DevOps, and cloud teams to reduce risk without slowing delivery.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement across modern applications, with a strong focus on secure SDLC practices.