Application Security Engineer — Secure SDLC & Automation

OneStream Software; United States; On-site; USD 114,000 - 148,000; Full time

Benefits offered by this job

Excellent Medical Plan

Dental & Vision Insurance

Life Insurance

Short & Long Term Disability

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream Software is seeking an Application Security Engineer to safeguard our OneStream platform. You will triage findings from security tools, collaborate with engineering for remediation, and support security design reviews across the SDLC.

A focus on automation and AI-assisted tooling will help you scale security across teams. Ideal candidates bring solid software security fundamentals, experience with SAST/SCA/DAST, and familiarity with C#/.NET.

Qualifications

• 5+ years of experience in application security, software development, or DevSecOps.
• Strong knowledge of SAST, SCA, DAST tools and remediation guidance.
• Experience with CI/CD pipelines and DevSecOps practices.

Responsibilities

• Triage and validate findings from application security tools, prioritizing by risk.
• Remediate vulnerabilities with clear, practical guidance with engineering teams.
• Participate in security architecture reviews and threat modelling for new features.
• Integrate security tooling into CI/CD pipelines and automate repetitive tasks with AI-assisted tooling.
• Write scripts and lightweight tooling to automate recurring security workflows.

Skills

C# & .NET

DevSecOps

Python scripting

PowerShell scripting

Education

BSc/BA in Computer Science or Engineering

MSc/MA in Computer Science or Engineering

Assoc. in Computer Science/Engineering

Tools

SAST

SCA

DAST

Burp Suite

Job description

OneStream Software is seeking an Application Security Engineer to safeguard our OneStream platform. You will triage findings from security tools, collaborate with engineering for remediation, and support security design reviews across the SDLC.

A focus on automation and AI-assisted tooling will help you scale security across teams. Ideal candidates bring solid software security fundamentals, experience with SAST/SCA/DAST, and familiarity with C#/.NET.