Application Security Engineer - Secure Code & DevSecOps

Cybersecurity Jobs; Palo Alto (CA); On-site; USD 100,000 - 258,000; Full time

Job summary

SpaceXSI is seeking an Application Security Engineer to safeguard cloud-native apps across the SDLC. The role focuses on secure coding, CI/CD security, and security for AI projects, including OWASP LLM Top 10.

You will perform detailed code reviews, design guidelines, and embed security into pipelines while collaborating with dev teams. Knowledge of OWASP Top 10 and strong communication skills are essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field required.
• 3-5 years of application security experience with emphasis on code security.
• Deep understanding of secure coding, security frameworks, and OWASP Top 10.

Responsibilities

• Perform in-depth code reviews and static analysis to identify vulnerabilities.
• Design secure coding guidelines and development-team best practices.
• Embed security into CI/CD pipelines and support DevSecOps workflows
• Conduct threat modeling and risk assessments with mitigation plans.
• Own vulnerability tracking and remediation guidance for teams
• Support incident response activities related to application security
• Monitor emerging cloud-native and AI threats to strengthen defenses
• Evaluate and secure SBOMs and software supply chains

Skills

Code security

Secure coding

DevSecOps

Threat modeling

Communication skills

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite

OWASP ZAP

SBOM tools

CI/CD security

Python

Rust

Job description

SpaceXSI is seeking an Application Security Engineer to safeguard cloud-native apps across the SDLC. The role focuses on secure coding, CI/CD security, and security for AI projects, including OWASP LLM Top 10.

You will perform detailed code reviews, design guidelines, and embed security into pipelines while collaborating with dev teams. Knowledge of OWASP Top 10 and strong communication skills are essential.