AppSec Engineer: Secure SDLC & DevSecOps in Cloud

Saransh Inc; Maryland Heights (MO); On-site; USD 110,000 - 160,000; Full time

Job summary

Saransh Inc. in Maryland Heights, MO is seeking an Application Security Engineer to embed security testing, vulnerability management, and business logic validation into CI/CD pipelines and post-deployment processes while maintaining engineering velocity.

The ideal candidate combines expertise in secure SDLC, automated security testing, DevSecOps, cloud-native applications, APIs, and manual testing to improve application security posture across web, mobile, and microservices architectures.

Qualifications

• 8-15 years of experience in Application Security, DevSecOps, or Security Architecture.
• Experience securing large-scale enterprise applications across cloud and hybrid environments.
• Knowledge of secure SDLC, automated security testing, and threat modeling.
• Certifications such as CISSP, CSSLP, GWAPT, OSCP, CEH, or cloud security certs preferred.

Responsibilities

• Design and implement enterprise-wide Application Security programs for web, mobile, and API-based applications.
• Integrate security controls and testing into Agile, DevOps, and CI/CD pipelines.
• Establish automated security gates using SAST, DAST, SCA, IAST, secret scanning, and container security tools.
• Enable continuous post-deployment security validation and risk monitoring.
• Automate vulnerability triage, prioritization, and remediation workflows.
• Develop security-as-code controls and policy enforcement mechanisms.
• Collaborate with engineering teams to implement secure coding practices and shift-left security initiatives.
• Provide remediation guidance during application releases.
• Drive adoption of secure development standards and best practices.
• Assess cloud-native applications deployed across AWS, Azure, GCP, Kubernetes.
• Secure REST, GraphQL, and microservice-based APIs.
• Evaluate infrastructure-as-code and container security controls.
• Support software supply chain security initiatives, including SBOM/SCA validation.

Skills

AppSec

DevSecOps

SAST/DAST/IAST/SCA

Web/Mobile/API Security

Penetration Testing

Threat Modeling

Vulnerability Management

Secure Code Review

CI/CD Security

Cloud & API Security

Tools

Microsoft Threat Modeler

Backtrack Penetration Testing

Job description

Saransh Inc. in Maryland Heights, MO is seeking an Application Security Engineer to embed security testing, vulnerability management, and business logic validation into CI/CD pipelines and post-deployment processes while maintaining engineering velocity.

The ideal candidate combines expertise in secure SDLC, automated security testing, DevSecOps, cloud-native applications, APIs, and manual testing to improve application security posture across web, mobile, and microservices architectures.