DevSecOps: Application Security Engineer

Ascensus; Florida; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to lead the security program across web and API services. You will partner with Scrum teams to integrate security into the SDLC, perform architecture reviews and threat modeling, and guide developers on secure coding practices.

You will participate in penetration testing support, manage vulnerability triage, and implement SAST/DAST/ SCA within CI/CD. Strong collaboration and proactive security leadership are required.

Qualifications

• Minimum 4 years in Secure Software Development and/or DevSecOps.
• Ability to define software security and privacy requirements.
• Strong understanding of threat modeling, risk, and mitigation.

Responsibilities

• Protect confidential data and ensure secure handling.
• Provide security consultation to Scrum teams and owners.
• Define and implement DevSecOps across SDLC.
• Conduct architecture reviews, data-flow analyses, and threat modeling.
• Support SAST/DAST/SCA in CI/CD and remediate findings.

Skills

Secure SDLC

Threat Modeling

CI/CD

App Security Tools

API Security

Vulnerability Management

Understanding of OWASP

Cloud Security

Java/.NET Experience

Tools

Burp Suite

Fiddler

Zap

Nessus/Qualys

Metasploit

Job description

Ascensus is seeking an Application Security Engineer to lead the security program across web and API services. You will partner with Scrum teams to integrate security into the SDLC, perform architecture reviews and threat modeling, and guide developers on secure coding practices.

You will participate in penetration testing support, manage vulnerability triage, and implement SAST/DAST/ SCA within CI/CD. Strong collaboration and proactive security leadership are required.