Application Security Engineer (Fully Remote)

VGS; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

VGS is seeking a security-focused engineer to automate security controls by integrating SAST, DAST, and SCA into CI/CD pipelines. You will define a developer-friendly Secure SDLC and drive threat modeling using STRIDE. You will also manage the private bug bounty program, triage reports, and conduct code reviews for Java and Python microservices.

Join a fast-growing security team in the United States, collaborate with developers, and raise the bar for secure software delivery across our platforms.

Qualifications

• Experience integrating SAST, DAST, and SCA into CI/CD pipelines.
• Ability to drive secure SDLC and threat modeling frameworks (STRIDE).
• Experience managing bug bounty programs and triaging reports.

Responsibilities

• Automate security controls by integrating SAST, DAST, and SCA into CI/CD pipelines.
• Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE.
• Manage the private bug bounty program, triage reports, and conduct code reviews for Java and Python microservices.

Skills

CI/CD security

SAST/DAST/SCA

Threat modeling

STRIDE

Bug bounty management

Code review

Java

Python

Job description

• - Automate security controls by integrating SAST, DAST, and SCA tools into CI/CD pipelines to catch vulnerabilities before production.
• - Define and drive a developer-friendly Secure SDLC, including threat modeling frameworks like STRIDE and security champions network.
• - Manage the private bug bounty program, triage reports, lower mean time to mitigation, and conduct code reviews for Java and Python microservices.