AppSec Engineer: Secure Web & Mobile Applications

Socket.dev; United States; Remote; USD 107,000 - 147,000; Full time

Job summary

Socket.dev is seeking an Application Security Engineer to strengthen security across web, mobile, and restaurant tech environments. You will partner with engineering and product teams to identify, prioritize, and remediate vulnerabilities, while promoting secure development practices and SDLC integration.

You will manage security testing programs (SAST/DAST/SCA), monitor emerging threats, and communicate risks to technical and non-technical stakeholders, aligning with risk-based priorities and

Qualifications

• Bachelor's degree and 4+ years in cybersecurity or software development.
• Experience evaluating vulnerabilities for exploitability, business risk, and remediation.
• Ability communicating technical concepts to both technical and non-technical audiences.
• Familiarity with SSDLC practices and modern software delivery methods.
• Familiarity with PCI DSS, GDPR, CCPA and how they influence security testing.

Responsibilities

• Partner with US teams to provide security guidance as SME for app security.
• Identify, prioritize, and remediate vulnerabilities in web/mobile apps.
• Review findings and communicate remediation with engineering teams.
• Maintain app security scan profiles and policies across SAST/DAST/SCA.
• Integrate security into the SDLC and secure release processes.
• Conduct awareness campaigns on secure software development practices.
• Monitor vulnerabilities and coordinate with incident response as needed.
• Coordinate with incident response to contain and analyze security incidents.

Skills

Vulnerability assessment

SSDLC familiarity

Security communication

Git workflows

CI/CD security

OWASP Top 10

SBOMs

Container security

RBAC

SAST/DAST/SCA

Education

Bachelor's degree

Tools

Docker

Kubernetes

Terraform

CloudFormation

SAST tools

DAST tools

SBOM tooling

Job description

Socket.dev is seeking an Application Security Engineer to strengthen security across web, mobile, and restaurant tech environments. You will partner with engineering and product teams to identify, prioritize, and remediate vulnerabilities, while promoting secure development practices and SDLC integration.

You will manage security testing programs (SAST/DAST/SCA), monitor emerging threats, and communicate risks to technical and non-technical stakeholders, aligning with risk-based priorities and