Cybersecurity Engineer IV Application Security

Globenet Consulting Corp; Bellevue (WA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Advancement opportunities

Training & development

Job summary

The AES Group is hiring a Cybersecurity Engineer IV – Application Security to advance security across the SDLC and partner with software teams. This role emphasizes secure-by-design development, continuous testing (SAST/DAST), and DevSecOps in a fast-paced environment.

Ideal candidates have 8+ years of info security or a Master's with 6+ years, with deep AppSec and CI/CD security expertise. Onsite work is expected at major US locations with flexible options.

Qualifications

• Bachelor's degree plus 8+ years in Information Security, or a Master's with 6+ years of experience.
• Strong Application Security experience is required and hands-on expertise.
• Experience integrating security across the SDLC and CI/CD pipelines.

Responsibilities

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

Skills

Hands-on AppSec

SDLC integration

Secure coding

DevSecOps

SAST

DAST

CI/CD security

GitHub/SCM

Stakeholder comms

Education

Bachelor's degree in Information Security

Master's degree in Information Security

Tools

SAST tools

DAST tools

CI/CD tooling

GitHub

Job description

Benefits:

• Competitive salary
• Opportunity for advancement
• Training & development

Cybersecurity Engineer IV – Application Security

Location: Chicago, IL | Peoria, IL | Dallas, TX
Work Model: Hybrid

Let’s create our future together at The AES Group!

Why Join Us

• Secure high-visibility web and eCommerce applications.
• Partner with software engineering teams throughout the SDLC.
• Drive Application Security and DevSecOps best practices.
• Work on business-critical platforms with experienced engineering teams.

Position Overview

We are hiring a Cybersecurity Engineer IV – Application Security to join our Security Engineering team. This is a dedicated Application Security role focused on embedding security throughout the Software Development Lifecycle (SDLC). This is not a Network Security, SOC, Infrastructure Security, or general Cybersecurity position.

Key Responsibilities

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, security governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

Education & Experience

• Bachelor's degree with 8+ years of Information Security experience, or
• Master's degree with 6+ years of Information Security experience.
• Strong Application Security experience is required.

Must-Have Skills

• Hands-on Application Security expertise.
• Strong understanding of the complete SDLC, including requirements, architecture, development, testing, deployment, production support, and maintenance.
• Experience integrating security into software development.
• Secure coding and Application Security Governance.
• Experience with SAST, DAST, vulnerability management, and remediation.
• Experience working directly with software development teams.
• Security integration within CI/CD pipelines.
• Experience with GitHub or similar source control tools.
• Excellent communication, collaboration, presentation, and stakeholder management skills.

Preferred Qualifications

• Software development background.
• Source code review and analysis.
• DevSecOps experience.
• AI programming, AI models, or AI-assisted software development.
• Knowledge of modern Application Security tools and best practices.

Important Notes

• This role requires Application Security expertise. Candidates focused primarily on Network Security, SOC Operations, Infrastructure Security, or general Cybersecurity are not a fit.
• Experience partnering with software developers and integrating security throughout the SDLC is mandatory.
• Candidates must be local to Chicago, IL, Peoria, IL, or Dallas, TX and willing to work onsite full-time as business needs evolve.

Flexible work from home options available.