Application Security Engineer - SAST/DAST & Secure CI/CD

SmartRecruiters, Inc.; New York (NY); On-site; USD 125,000 - 150,000; Full time

Job summary

The Office of Technology and Innovation (OTI) in New York City seeks an Application Security Engineer to safeguard city digital infrastructure. You will perform SAST, DAST, and manual reviews, guide code remediation with agency developers, and integrate security into CI/CD pipelines using GitHub Actions, Azure DevOps, or GitLab.

This role requires a bachelor’s degree and four years of related experience; work may include nights or weekends in a 24/7 operation.

Qualifications

• Bachelor's degree and four years of full‑time related experience are required.
• Experience with application security assessments and secure coding practices preferred.

Responsibilities

• Execute application security assessments within the SSAP framework.
• Perform SAST, DAST, and manual reviews to validate vulnerabilities.
• Operate SCA tools to monitor open‑source component risks.
• Conduct threat modeling during design to identify security flaws.
• Provide remediation guidance to agency development teams.

Skills

Threat modeling

Secure coding

CI/CD collaboration

Security assessments

Education

Bachelor's degree

Tools

SAST

DAST

SCA

GitHub Actions

Azure DevOps

GitLab

Job description

The Office of Technology and Innovation (OTI) in New York City seeks an Application Security Engineer to safeguard city digital infrastructure. You will perform SAST, DAST, and manual reviews, guide code remediation with agency developers, and integrate security into CI/CD pipelines using GitHub Actions, Azure DevOps, or GitLab.

This role requires a bachelor’s degree and four years of related experience; work may include nights or weekends in a 24/7 operation.