Application Security Engineer: Secure Cloud Apps & DevOps

ROSTR, Inc.; Nashville (TN); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Mental health coverage

Fertility coverage

Wellbeing reimbursements

Student loan assistance

401(k) with vesting

Job summary

Universal Music Group in Nashville, TN, is seeking an Application Security Engineer to strengthen security across internal apps and cloud services, partnering with engineering, infrastructure, and product teams to weave security into the software development lifecycle.

The ideal candidate has hands-on experience in application security, secure coding, cloud-native tech, and developer enablement, with strong communication skills and a passion for building secure software.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 5+ years in Application Security or related discipline with security focus.
• Experience with application security assessments, threat modeling, and secure architecture reviews.
• Strong knowledge of OWASP Top 10 and API security.
• Experience with SAST/DAST/SCA, API security testing, and pen testing methodologies.
• Experience with REST/microservices, cloud-native tech, and CI/CD security.
• Experience in AWS/Azure/GCP and CI/CD integration.

Responsibilities

• Perform application security assessments, threat modeling, and secure design reviews.
• Conduct SAST, DAST, SCA, API security testing, and manual validation.
• Review code and provide secure coding guidance per OWASP.
• Work with engineering to identify risks and remediation strategies.
• Integrate security testing into CI/CD pipelines and workflows.
• Provide security architecture guidance for apps and APIs.
• Support modern authentication/authorization tech (OAuth, OIDC, SAML, JWT).
• Maintain security tools and improve testing coverage.
• Develop automation to improve testing and reporting.
• Participate in security reviews for new tech and cloud services.
• Assist in security incident investigation and remediation.
• Create reusable security guidance, reference architectures, and docs.

Skills

Threat modeling

Secure SDLC

OWASP Top 10

SAST/DAST

CI/CD security

Cloud security

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

GitHub Advanced Security

Checkmarx

Veracode

Burp Suite

Semgrep

Job description

Universal Music Group in Nashville, TN, is seeking an Application Security Engineer to strengthen security across internal apps and cloud services, partnering with engineering, infrastructure, and product teams to weave security into the software development lifecycle.

The ideal candidate has hands-on experience in application security, secure coding, cloud-native tech, and developer enablement, with strong communication skills and a passion for building secure software.