Application Security Engineer — DevSecOps in the Cloud (Hybrid)

Purpose Brands Intermediate, LLC; Boca Raton (FL); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid Work Environment

Medical, Dental and Vision Coverage

Life and Disability Insurance

401(k) Savings Plan Matching

Unlimited Time off + Paid Holidays

Professional Development Opportunities

In-house workout facilities

Team Building, Employee Engagement

Job summary

Purpose Brands is seeking an Application Security Engineer to strengthen security across the software delivery lifecycle in AWS and Azure, reporting to the Staff Security Engineer.

This hybrid role emphasizes hands-on security engineering, tooling integration, and developer enablement, with collaboration across software engineering, DevOps, and cloud teams in a fast-paced, inspirational culture.

Qualifications

• Bachelor’s degree or higher in a relevant field.
• 3–5 years of experience in application security, security engineering, or software engineering with a strong security focus.
• Hands-on experience performing code reviews and application security testing across modern languages, frameworks, and APIs.
• Experience with SAST, DAST, and dependency scanning tools.
• Strong understanding of OWASP Top 10 and secure coding practices.

Responsibilities

• Embed application security practices across the SDLC from design through deployment.
• Perform application security assessments (SAST/DAST/SCA) and threat modeling.
• Partner with engineering, DevOps, and cloud teams to mature security processes and tooling.
• Manage vulnerability findings and remediation workflows to reduce risk.
• Support cloud security for AWS and Azure environments and align with security controls.

Skills

Code reviews

Application security testing

SAST

DAST

Dependency scanning

OWASP Top 10

CI/CD pipelines

DevSecOps

Excellent communication

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field

Tools

GitHub Advanced Security

Syft

Clair

Qualys

GitHub Dependabot

Job description

Purpose Brands is seeking an Application Security Engineer to strengthen security across the software delivery lifecycle in AWS and Azure, reporting to the Staff Security Engineer.

This hybrid role emphasizes hands-on security engineering, tooling integration, and developer enablement, with collaboration across software engineering, DevOps, and cloud teams in a fast-paced, inspirational culture.