DevSecOps Application Security Engineer

Ascensus; Pennsylvania; On-site; USD 120,000 - 160,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to lead security across the software development lifecycle. You will partner with scrum teams to embed security practices in design, development, and deployment, ensuring data protection and strong threat mitigation.

You will drive security approvals, advise on secure coding, and support SAST/DAST and SCA tooling within CI/CD pipelines, while aligning with industry standards and regulatory requirements.

Qualifications

• Secure SDLC knowledge and secure software development practices
• Threat modeling and risk mitigation understanding
• Experience integrating security into CI/CD pipelines
• Familiarity with security testing tools and vulnerability management
• Experience with OWASP Top 10 and common API security risks

Responsibilities

• Protect confidential data and ensure proper handling to prevent unauthorized access or disclosure
• Serve as trusted application security advisor to Ascensus scrum teams
• Develop agile DevSecOps approach across SDLC and manage risk
• Provide security consultation to scrum teams and owners on controls and secure processes
• Involve in sprint planning to ensure security requirements are embedded in development
• Conduct architecture reviews, data-flow analysis, penetration testing support, and threat modeling
• Enforce policies, coding standards, and security controls to mitigate threats
• Deploy and integrate SAST, DAST and SCA in CI/CD and guide remediation
• Assist with other tasks and projects as assigned

Job description

Ascensus is seeking an Application Security Engineer to lead security across the software development lifecycle. You will partner with scrum teams to embed security practices in design, development, and deployment, ensuring data protection and strong threat mitigation.

You will drive security approvals, advise on secure coding, and support SAST/DAST and SCA tooling within CI/CD pipelines, while aligning with industry standards and regulatory requirements.