Application Security Engineer II - Build Secure, Scalable Apps

Talanto; Northern (KY); Hybrid; USD 7,500 - 11,000; Full time

Benefits offered by this job

Health insurance

401(k) plan and match

Annual performance bonus

Paid time off

Wellness allowance

Technology allowance

Job summary

Talanto is seeking a Security Engineer II focused on Application Security to own the day‑to‑day vulnerability management program and partner with product teams to securely ship features. You will triage findings from SAST/DAST/SCA, drive remediation, and build automation that scales the program while collaborating across the TechOps security discipline.

You will leverage AI tooling, contribute to developer‑facing security docs, and advocate secure coding practices.

Qualifications

• 2–4 years of experience in security engineering or related role.
• Understanding of SAST/DAST/SCA and remediation steps.
• Knowledge of secure development practices (OWASP Top 10/MASVS).
• Experience with AI/agentic tooling and security workflows.
• Security triage, investigation, and vulnerability management experience.
• Familiarity with cloud microservices, Kubernetes, and IaC.

Responsibilities

• Triage findings from SAST, SCA, DAST, and mobile tools; assign severity and due dates.
• Manage bug bounty program scoping and triage submissions.
• Leverage AI-assisted tooling to accelerate security workflows and remediation.
• Build security automation in SOAR and Python to automate intake, notifications, and reporting.
• Partner with product engineering to enable secure development and remediation discussions.
• Conduct security reviews of new features, services, and third‑party integrations.
• Advocate secure coding practices and contribute to developer security docs.

Skills

Security engineering

Application security

Threat triage

AI tooling

Cross-functional collaboration

Education

BS in Computer Science or related field

Tools

Python

GitHub Actions

SOAR

Job description

Talanto is seeking a Security Engineer II focused on Application Security to own the day‑to‑day vulnerability management program and partner with product teams to securely ship features. You will triage findings from SAST/DAST/SCA, drive remediation, and build automation that scales the program while collaborating across the TechOps security discipline.

You will leverage AI tooling, contribute to developer‑facing security docs, and advocate secure coding practices.