AppSec Architect: Secure SDLC & DevSecOps Lead

TechDigital Group; Maryland Heights (MO); On-site; USD 120,000 - 160,000; Full time

Job summary

TechDigital Group is seeking an experienced Application Security Engineer to embed security testing, vulnerability management, and threat validation across web, mobile, and API ecosystems. You will implement automated controls in CI/CD, conduct manual testing where needed, and drive secure development practices across engineering teams.

The role focuses on cloud-native applications, APIs, and microservices, with emphasis on SAST/DAST/IAST, SBOM, and secure code reviews to improve security

Qualifications

• 8–15 years of experience in Application Security.
• Experience securing large-scale enterprise applications across cloud and hybrid environments.
• Certifications such as CISSP, CSSLP, GWAPT, OSCP, CEH preferred.

Responsibilities

• Design and implement enterprise-wide Application Security programs for web, mobile, and API-based applications.
• Integrate security controls and testing into Agile, DevOps, and CI/CD pipelines.
• Establish automated security gates using SAST, DAST, SCA, IAST, secret scanning, and container security tools.
• Enable continuous post-deployment security validation and risk monitoring.
• Conduct manual penetration testing and business logic testing to identify vulnerabilities beyond automated scanning.
• Perform authenticated and unauthenticated security assessments of applications and APIs.
• Execute threat modeling, attack-path analysis, and architecture reviews for new applications and platform services.
• Validate remediation effectiveness and secure deployment practices.
• Embed security testing into GitHub Actions, Azure DevOps, Jenkins, GitLab, or similar CI/CD platforms.
• Automate vulnerability triage, prioritization, and remediation workflows.
• Develop security-as-code controls and policy enforcement mechanisms.
• Collaborate with engineering teams to implement secure coding practices and shift-left security initiatives.

Tools

GitHub Actions

Azure DevOps

Jenkins

GitLab

Kubernetes

Terraform

Job description

TechDigital Group is seeking an experienced Application Security Engineer to embed security testing, vulnerability management, and threat validation across web, mobile, and API ecosystems. You will implement automated controls in CI/CD, conduct manual testing where needed, and drive secure development practices across engineering teams.

The role focuses on cloud-native applications, APIs, and microservices, with emphasis on SAST/DAST/IAST, SBOM, and secure code reviews to improve security