Application Security Engineer: DevSecOps Innovator

GameChanger; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Remote work in US

Unlimited vacation

Volunteer opportunities

Tech stipend

WFH stipend

Wellness stipend

Lifestyle stipend

Health benefits

Retirement plan

Life & disability insurance

Parental leave

Family benefits

Employee discounts

Job summary

GameChanger, a remote-first tech company based in New York City, is seeking a Security Engineer to join our InfoSec team. You’ll drive security across the SDLC, champion secure design, and partner with engineers to ship safer software.

Key areas include application security, DevSecOps, and vulnerability management: secure code reviews, secure API patterns, IaC and container hardening, and risk reporting to leadership.

Qualifications

• 3+ years in application security engineering.
• Experience building security developer platforms.
• Experience with AI/ML driven security tooling.
• Leads threat modeling and secure-by-design initiatives.
• Ability to integrate security into CI/CD pipelines.
• Familiarity with AWS and container security.

Responsibilities

• Embed security across the SDLC and secure APIs.
• Champion secure design for Gen AI features.
• Perform secure code reviews with actionable findings.
• Establish secure API patterns (REST/GraphQL).
• Maintain secure coding guidelines and patterns.
• Support IaC-based cloud deployments (Terraform, Kubernetes).
• Lead vulnerability management and risk reporting.

Skills

AppSec experience

CI/CD tooling

AI/ML security

Threat modeling

Secure design

OWASP Top 10

AWS/Kubernetes security

Tools

Terraform

Kubernetes

GitHub Actions

Job description

GameChanger, a remote-first tech company based in New York City, is seeking a Security Engineer to join our InfoSec team. You’ll drive security across the SDLC, champion secure design, and partner with engineers to ship safer software.

Key areas include application security, DevSecOps, and vulnerability management: secure code reviews, secure API patterns, IaC and container hardening, and risk reporting to leadership.