Application Security Engineer — Hybrid/DevSecOps

Worky; Richmond (VA); Hybrid; USD 78,000 - 117,000; Full time

Benefits offered by this job

Competitive compensation

Bonus eligible

Healthcare coverage

401(k) plan

Paid time off

Tuition reimbursement

Job summary

Genworth is seeking an Application Security Engineer to safeguard secure development across on-prem and cloud environments. You will collaborate with internal partners to enforce policies and standards and help mature DevSecOps practices.

Candidates should have 3+ years in security engineering with strong application security and cloud experience. The role involves vulnerability tooling, threat modelling, and ongoing security governance in a hybrid in-office/remote setup to support core business

Qualifications

• 3+ years in a Security Engineering role with application security focus.
• Experience securing applications in cloud environments (AWS/Azure/GCP).
• Familiarity with SOC2, ISO 27001, NIST 800-53 controls.

Responsibilities

• Operate and maintain application vulnerability scanning tools and AST platforms.
• Collaborate with developers to identify and remediate security issues.
• Support security investigations and remediation activities.
• Administer security technologies and automation platforms daily.
• Participate in security assessments, threat modelling, and risk reduction.
• Generate reports and dashboards for security posture visibility.
• Track KRIs and security scorecards; support CI/CD security reviews.
• Assist with vulnerability triage and remediation tracking.
• Evaluate security tools, processes, and technologies for the org.
• Assist with security reviews, governance, and continuous improvement.

Skills

Threat modeling

Risk assessment

Cloud security (AWS/Azure/GCP)

DevSecOps

Vulnerability scanning

AST platforms

IaC/PaC

Secure SDLC

Scripting (Python/PowerShell/Java)

Penetration testing

HIPAA/PHI/PII/PCI compliance

Education

Bachelor's degree in Computer Science or similar

Tools

Vulnerability scanning tools

AST platforms

Cloud security tooling

Job description

Genworth is seeking an Application Security Engineer to safeguard secure development across on-prem and cloud environments. You will collaborate with internal partners to enforce policies and standards and help mature DevSecOps practices.

Candidates should have 3+ years in security engineering with strong application security and cloud experience. The role involves vulnerability tooling, threat modelling, and ongoing security governance in a hybrid in-office/remote setup to support core business