AppSec Engineer

Bright Vision Technologies; San Diego, 4S Ranch (CA, CA); Remote; USD 80,000 - 100,000; Full time

Job summary

Bright Vision Technologies is seeking an AppSec Engineer to embed security across the software development lifecycle and partner with engineering teams to design secure systems that reduce risk. The role blends offensive and defensive security with strong communication, aiming to ship secure software efficiently.

The ideal candidate has 6+ years of AppSec or security engineering experience, deep OWASP Top 10 knowledge, and hands-on code review across multiple languages.

Qualifications

• Bachelor’s degree in CS, Cybersecurity, or related field.
• 5+ years of application security or security engineering experience.
• Solid knowledge of OWASP Top 10 and common vulnerability classes.
• Experience reviewing code across at least two major programming languages.
• Hands-on with SAST/DAST/SCA and CI/CD‑integrated security tooling.
• Understanding of authentication, authorization, and cryptographic primitives.
• Experience with cloud security and modern infrastructure controls.
• Excellent communication with technical and non-technical audiences.
• Proficiency in at least one programming language for tooling and automation.
• Experience collaborating with engineering teams in Agile environments.

Responsibilities

• Embed security across the software development lifecycle.
• Collaborate with engineering teams to design secure systems and reduce risk.
• Identify vulnerabilities and drive security improvements in production.
• Balance offensive and defensive security activities with effective communication.

Skills

OWASP Top 10 knowledge

Code review in multiple languages

Strong communication

Agile experience

Tooling with programming languages

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

SAST

DAST

SCA

CI/CD security tooling

Job description

AppSec Engineer– Remote

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Job Title: AppSec Engineer

Location: 100% Remote (U.S.)

Position Type: Full-time, Direct W2

Salary Range: $80,000–$100,000 Annually

Experience Required: 6+ years

Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.

Job Summary

We are looking for an AppSec Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio. The role blends hands‑on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down. The ideal candidate brings deep technical security expertise, strong software engineering fundamentals, and a track record of shipping security improvements that meaningfully reduce risk in production.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Five or more years of application security or security engineering experience.
• Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
• Hands‑on experience performing code review across at least two major languages.
• Deep familiarity with SAST, DAST, SCA, and CI/CD‑integrated security tooling.
• Strong understanding of authentication, authorization, and cryptographic primitives.
• Experience with cloud security and modern infrastructure controls.
• Strong communication skills with technical and non-technical audiences.
• Proficiency in at least one programming language for tooling and automation.
• Experience working closely with engineering teams in an Agile environment.

Preferred Qualifications

• Industry certifications such as OSCP, OSCE, GWAPT, or CISSP.
• Experience with offensive security tooling and red‑team operations.
• Bug bounty experience, public CVEs, or open‑source security contributions.
• Familiarity with AI/LLM application security considerations.
• Exposure to regulated industries with strict compliance requirements.

Bright Vision Technologies is an Equal Opportunity Employer.

Equal Employment Opportunity (EEO) Statement

Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.

BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.