Application Security Engineer: Secure SDLC Builder

Ringside Talent; Columbus (OH); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Ringside Talent is seeking an Application Security Engineer for a hybrid role based in Columbus, OH. You will embed security into the software development lifecycle, working closely with engineering teams to build safer software from the ground up.

You will identify and remediate vulnerabilities across web apps, APIs, mobile apps, and cloud environments, applying OWASP Top 10 and CWE knowledge to guide secure development practices.

Qualifications

• 3+ years of application security, product security, or related cybersecurity experience.
• Hands-on experience identifying and remediating vulnerabilities across web apps, APIs, mobile apps, and cloud environments.
• Strong understanding of OWASP Top 10, CWE, secure coding practices, and common attack vectors.
• Experience with SAST/DAST tools and embedding security testing into CI/CD and DevSecOps workflows.
• Strong communication skills, with the ability to influence developers without direct authority.
• Excellent analytical and problem-solving skills.

Responsibilities

• Identify, assess, and remediate vulnerabilities across web applications, APIs, mobile applications, and cloud environments.
• Apply knowledge of OWASP Top 10, CWE, and common attack vectors to guide secure development practices.
• Integrate SAST/DAST tools and application security testing into CI/CD and DevSecOps pipelines.
• Partner with developers and engineering teams to communicate risk and recommend remediation steps.
• Review code and architecture for security weaknesses and provide actionable guidance to development teams.
• Support secure coding training and best-practice adoption across engineering teams.
• Stay current on emerging vulnerabilities, attack techniques, and application security tooling.
• Contribute to incident response efforts related to application-level security issues.
• Help shape and mature the organization's overall application security program.

Skills

Application security

Vulnerability assessment

CI/CD security

OWASP Top 10

Security testing

Developer communication

Tools

SAST tools

DAST tools

OWASP ZAP

Burp Suite

Jenkins

Job description

Ringside Talent is seeking an Application Security Engineer for a hybrid role based in Columbus, OH. You will embed security into the software development lifecycle, working closely with engineering teams to build safer software from the ground up.

You will identify and remediate vulnerabilities across web apps, APIs, mobile apps, and cloud environments, applying OWASP Top 10 and CWE knowledge to guide secure development practices.