Application Security Engineer: Secure Dev Lifecycle & Cloud

JW Affinity IT; Fort Worth, Town of Texas (TX, WI); On-site; USD 110,000 - 160,000; Full time

Job summary

JW Affinity IT seeks an experienced Application Security Engineer for a Dallas-based role. You will embed security into the application development and acquisition lifecycle, performing risk assessments, threat modeling, secure design, code reviews, vulnerability testing, and security automation across custom, cloud and third-party apps.

The ideal candidate has 5–7 years in application development or security, including 3+ years in application security, with knowledge of OWASP, SAST/DAST, API

Qualifications

• Bachelor’s degree in cybersecurity, computer science, or related field, or equivalent experience.
• 5–7 years of application development or security experience, including 3+ years in application security.
• Knowledge of OWASP, secure coding, threat modeling, SAST, DAST, software composition analysis, API security, CI/CD, cloud application security, and vulnerability management.
• Ability to work directly with developers and vendors. Certifications preferred (CSSLP, CISSP, GIAC, or cloud security).

Responsibilities

• Embed security into the application development and acquisition lifecycle.
• Perform application risk assessments and threat modeling.
• Conduct secure design and code reviews, vulnerability testing.
• Provide remediation guidance and security automation across apps.

Skills

OWASP

Secure coding

Threat modeling

SAST

DAST

API security

Education

Bachelor's degree in cybersecurity, computer science, or related field, or equivalent experience

Tools

CSSLP

CISSP

GIAC

Job description

JW Affinity IT seeks an experienced Application Security Engineer for a Dallas-based role. You will embed security into the application development and acquisition lifecycle, performing risk assessments, threat modeling, secure design, code reviews, vulnerability testing, and security automation across custom, cloud and third-party apps.

The ideal candidate has 5–7 years in application development or security, including 3+ years in application security, with knowledge of OWASP, SAST/DAST, API