Application Security Engineer: Secure SDLC & DevSecOps

Equinix, Inc; United States; A distancia; USD 106.000 - 159.000; Jornada completa

Descripción de la vacante

Equinix is seeking an Application Security Engineer to strengthen the security posture of the company’s applications. You will integrate security into the SDLC, embed security testing in CI/CD pipelines, and drive timely remediation of vulnerabilities.

You will collaborate with application teams on design reviews, threat modeling, and secure coding practices, guiding teams with practical remediation and risk-based decisions.

Formación

• 4-5 years in Application Security or DevSecOps in a medium/large company.
• Hands-on with SCA, SAST, Secret Scanning, and DAST tooling.
• Experience integrating security into CI/CD and pipelines (GitHub Actions).
• Familiar with OWASP Top 10, ASVS and secure SDLC practices.

Responsabilidades

• Integrate SAST/DAST/Secret Scanning tools into the SDLC and CI/CD pipelines.
• Lead threat modeling, secure design reviews, and architecture reviews with teams.
• Triage, validate and prioritize findings from security tests; reduce false positives.
• Provide remediation guidance and track findings to closure with developers.
• Promote secure coding standards and best practices across teams.
• Automate security tooling onboarding and policy-as-code through scripts (e.g., Python, Terraform).
• Report on application security posture to stakeholders.

Conocimientos

SAST tools

CI/CD security

OWASP standards

Threat modeling

Secure coding

Cloud security

Educación

Bachelor's degree in CS/Engineering

Herramientas

GitHub Actions

Apiiro

Snyk

Nexus IQ

Burp Suite

Descripción del empleo

Equinix is seeking an Application Security Engineer to strengthen the security posture of the company’s applications. You will integrate security into the SDLC, embed security testing in CI/CD pipelines, and drive timely remediation of vulnerabilities.

You will collaborate with application teams on design reviews, threat modeling, and secure coding practices, guiding teams with practical remediation and risk-based decisions.