Application Security Engineer: Secure SDLC & Code Reviews

Softswiss; Town of Poland (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Private health insurance

Sports benefits

Free English lessons (online)

Paid time off

Maternity leave support

Referral program rewards

Job summary

SOFTSWISS is seeking an Application Security Engineer to ensure secure software deployment and hardened applications throughout the SDLC. You will partner with product teams to identify and mitigate vulnerabilities, driving secure coding practices and proactive risk management.

You will perform in-depth security reviews, tune scanning tools, and develop automation to streamline security tasks while collaborating across engineering teams to improve the overall security posture.

Qualifications

• 3+ years of experience in application security or related roles.
• Knowledge of web application security mechanisms (SOP, CORS, CSP).
• Understanding of OWASP Top 10 and mitigation strategies.
• Secure-by-design principles and secure software development lifecycle.

Responsibilities

• Partner with product teams during design to perform threat modeling and risk assessments.
• Conduct manual code reviews to identify vulnerabilities in critical applications.
• Tune automated security scanning tools to reduce false positives and improve detection.
• Develop scripts to automate security workflows and streamline analysis.
• Assist developers in understanding security risks from risk assessments and threat modeling.
• Coordinate triage of vulnerabilities from bug bounty program with researchers and engineers.
• Provide security guidance to Dev/QA teams throughout SDLC and maintain internal security knowledge base.

Skills

Application security

Threat modeling

Code reviews

Security awareness

Education

University degree in Computer Science or Information Security

Tools

SAST/DAST tools

Job description

SOFTSWISS is seeking an Application Security Engineer to ensure secure software deployment and hardened applications throughout the SDLC. You will partner with product teams to identify and mitigate vulnerabilities, driving secure coding practices and proactive risk management.

You will perform in-depth security reviews, tune scanning tools, and develop automation to streamline security tasks while collaborating across engineering teams to improve the overall security posture.