Application Security Engineer — Secure SDLC & AI Tools

GameChanger; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Remote work nationwide US

Flexible work options

Competitive compensation

401(k) with company match

Equipment stipend

Wellness & learning stipends

Full health benefits

Paid time off

Diversity and inclusion program

Job summary

GameChanger is seeking a Security Engineer to partner with our software engineering organization and lead security across the SDLC. You will champion secure design and DevSecOps practices while collaborating with platform engineers to embed security into the software we build and ship.

You’ll also participate in on-call rotations and work to advance API security, secure coding standards, and security tooling, with a focus on scalable, secure cloud deployments using AWS, Terraform, and Kubernetes.

Qualifications

• 3+ years in application security engineering.
• Experience building security developer platforms or tooling to reduce developer friction.
• Demonstrated ability to use AI/ML-driven tools to enhance security effectiveness and scalability.
• Hands-on experience leading threat modeling engagements and designing paved roads.
• Proven track record integrating security tooling into CI/CD pipelines.
• Knowledge of OWASP Top 10s (web, mobile, API, LLM).
• Hands-on securing deployments in AWS with containers and Kubernetes security, IaC scanning, and policy-as-code approaches.
• Experience with security-by-design in TypeScript, Swift, and/or Kotlin.

Responsibilities

• Embed security into every phase of the SDLC.
• Champion security requirements for secure integration of Gen AI and agentic AI tools.
• Conduct security-by-design engagements for new features, APIs, platform initiatives, and infrastructure changes.
• Perform secure code reviews with actionable findings.
• Partner with architecture and platform teams to establish secure API patterns (REST and GraphQL).
• Contribute to secure coding guidelines and security architectural patterns.
• Provide code review feedback and developer-friendly documentation; run workshops as needed.
• Integrate and maintain security tooling across CI/CD pipelines.
• Enforce security quality gates in delivery pipelines.
• Harden CI/CD components including GitHub Actions and runners.
• Identify opportunities to leverage AI for productivity and security workflows.
• Work with DevOps to deploy secure cloud infrastructure via IaC (Terraform, Kubernetes).
• Implement security controls for containerized workloads; protect endpoints with WAF/CDN.

Skills

Application security engineering

Threat modeling

CI/CD tooling

Security by design

AI/ML security tooling

Security leadership

Tools

GitHub Actions

Terraform

Kubernetes

AWS

Job description

GameChanger is seeking a Security Engineer to partner with our software engineering organization and lead security across the SDLC. You will champion secure design and DevSecOps practices while collaborating with platform engineers to embed security into the software we build and ship.

You’ll also participate in on-call rotations and work to advance API security, secure coding standards, and security tooling, with a focus on scalable, secure cloud deployments using AWS, Terraform, and Kubernetes.