Application Security Engineer: DevSecOps & SDLC Expert

Ascensus; New Jersey; On-site; USD 120,000 - 170,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to lead the application security program within our software development lifecycle. You will serve as a trusted advisor to scrum teams, drive secure development practices, and ensure confidentiality, integrity, and availability of web apps and APIs.

Responsibilities include security consulting, threat modeling, code reviews, SAST/DAST/SCA tooling, and guiding developers in remediation within a DevSecOps framework.

Qualifications

• 4+ years in Secure Software Development or DevSecOps.
• Ability to define software security and privacy requirements.
• Experience with SDLC security controls and risk management.
• Familiarity with CI/CD pipelines and security tooling.

Responsibilities

• Protect confidential data and ensure secure handling.
• Provide security consultation to scrum teams and owners.
• Participate in sprint planning to embed security requirements.
• Conduct architecture review, data flow analysis, and threat modeling.
• Deploy and monitor SAST/DAST/SCA tooling; mentor remediation.

Skills

Secure SDLC

Threat modeling

CI/CD security

Vulnerability mgmt

SAST/DAST tooling

Cloud security

OWASP knowledge

Security collaboration

Tools

Burp Suite

Fiddler

ZAP

Wireshark

Metasploit

Nessus

Qualys

Job description

Ascensus is seeking an Application Security Engineer to lead the application security program within our software development lifecycle. You will serve as a trusted advisor to scrum teams, drive secure development practices, and ensure confidentiality, integrity, and availability of web apps and APIs.

Responsibilities include security consulting, threat modeling, code reviews, SAST/DAST/SCA tooling, and guiding developers in remediation within a DevSecOps framework.