Application Security Engineer: Secure SDLC & Testing

CivicPlus; United States; On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Comprehensive health insurance

Dental insurance

Vision insurance

Flexible Time Off

401(k) plan

Job summary

CivicPlus is seeking an Application Security Engineer to embed security across the SDLC, leading security testing and remediation to protect products for local governments and residents.

The role emphasizes securing multiple languages, CI/CD pipelines, and cloud-native SaaS environments, with a focus on OWASP Top 10 and emerging threats. The team values AI-driven productivity and responsible use of AI tools.

Qualifications

• 3–7 years of professional app security experience.
• Hands-on SAST/DAST/IAST testing tooling.
• Bachelor's degree in CS/Cybersecurity/IS or related field.

Responsibilities

• Perform security code reviews, threat modeling, and architecture reviews across projects.
• Collaborate with development teams to integrate secure design and secure coding practices.
• Identify, track, and remediate vulnerabilities from security testing and scanning.

Skills

Threat modeling

Code review

CI/CD security

Security testing

AI tooling

Education

Bachelor's degree in CS/Cybersecurity/IS

Tools

SAST

DAST

IAST

Job description

CivicPlus is seeking an Application Security Engineer to embed security across the SDLC, leading security testing and remediation to protect products for local governments and residents.

The role emphasizes securing multiple languages, CI/CD pipelines, and cloud-native SaaS environments, with a focus on OWASP Top 10 and emerging threats. The team values AI-driven productivity and responsible use of AI tools.