Application Security Engineer: Secure SDLC & Supply Chain

Saronic; Austin (TX); On-site; USD 120,000 - 190,000; Full time

Job summary

Saronic Technologies in Austin seeks a Security Engineer for Application Security to empower teams to ship fast without compromising safety across the SDLC, cloud, and enterprise systems.

You will own the application-security function, secure pipelines, and the software supply chain, building guardrails and pave the way for secure deployments by default. Collaboration with Software, DevOps, Cloud, and Platform Engineering is essential.

Qualifications

• 5+ years in application security, DevSecOps, or product security
• Hands-on secure SDLC: threat modeling, secure code review, and SAST/DAST/SCA in CI/CD
• Software supply-chain security (SCA/SBOM/signing) and secrets management
• Experience securing the deployment and self-hosting of applications (hardened images, isolation, identity, patching, monitoring)
• Comfortable in scripting and Infrastructure-as-Code for durable tooling
• Ability to obtain and maintain a U.S. security clearance

Responsibilities

• Secure SDLC & DevSecOps: run threat modeling and secure design and code reviews; integrate SAST, DAST, and SCA into CI/CD and secure pipelines from commit to deploy with gates.
• Software Supply Chain: own dependency and supply-chain security, SBOMs, artifact signing and provenance, and reducing exposure.
• Secrets & Application Controls: govern secrets management and data-loss-prevention through software controls.
• Secure Self-Hosting Infrastructure: design and harden infrastructure for securely self-hosting software across AWS, Azure, and on-prem; provide hardened base images and network isolation.
• Partnership: embed with engineering teams and build tooling that scales security across the org.

Skills

Application security

DevSecOps

Threat modeling

Secure SDLC

SCA / SBOM

Tools

SAST

DAST

SCA

CI/CD

Job description

Saronic Technologies in Austin seeks a Security Engineer for Application Security to empower teams to ship fast without compromising safety across the SDLC, cloud, and enterprise systems.

You will own the application-security function, secure pipelines, and the software supply chain, building guardrails and pave the way for secure deployments by default. Collaboration with Software, DevOps, Cloud, and Platform Engineering is essential.