Application Security Engineer: Threat Modeling & Secure Dev

JW Affinity IT; Dallas, Northern (TX, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

JW Affinity IT in Dallas, TX is seeking an experienced Application Security Engineer to embed security throughout the software development lifecycle. The role protects enterprise applications across on-premises and cloud environments and coordinates with developers and security teams to build resilient systems.

You will perform risk assessments, threat modeling, secure design reviews, and vulnerability testing, while guiding remediation, automating security tasks, and integrating security tools

Qualifications

• Bachelor's degree in cybersecurity, computer science, or related field.
• 5–7 years of application development or security experience, including 3+ years in application security.
• Knowledge of OWASP, secure coding, threat modeling, SAST, DAST, software composition analysis, API security, CI/CD, cloud application security, and vulnerability management.

Responsibilities

• Embeds security into the district's application development and acquisition lifecycle.
• Performs risk assessments, threat modeling, secure design and code reviews, vulnerability testing, tool integration, remediation guidance, and security automation across custom, cloud, and third-party applications.

Skills

Application security

Threat modeling

Secure coding

SAST/DAST

CI/CD security

Cloud security

Dev collaboration

Education

Bachelor's degree in cybersecurity, computer science, or related field

Tools

SAST tools

DAST tools

CI/CD security tooling

Job description

JW Affinity IT in Dallas, TX is seeking an experienced Application Security Engineer to embed security throughout the software development lifecycle. The role protects enterprise applications across on-premises and cloud environments and coordinates with developers and security teams to build resilient systems.

You will perform risk assessments, threat modeling, secure design reviews, and vulnerability testing, while guiding remediation, automating security tasks, and integrating security tools