DevSecOps Application Security Engineer

Ascensus; Pennsylvania; On-site; USD 110,000 - 140,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to own and advance the secure software development program across its web and API platforms. You will embed with scrum teams, advise on security controls, and drive best practices in DevSecOps to protect data and maintain system integrity.

Responsibilities include architecture reviews, threat modeling, security testing in CI/CD, and enforcing coding standards. Strong collaboration with leadership and cross-functional teams is essential.

Qualifications

• Minimum 4 years in secure software development or DevSecOps.
• Ability to define software security and privacy requirements.
• Understanding of threat modeling, risk, and mitigation.
• Experience with SDLC security practices and secure coding standards.
• Experience integrating security testing into CI/CD pipelines.

Responsibilities

• Protect confidential data and ensure secure handling.
• Consult scrum teams on security controls and secure SDLC.
• Participate in sprint planning to embed security requirements.
• Perform architecture reviews and threat modeling.
• Support SAST/DAST and manage security tests in CI/CD.
• Guide remediation and monitor security policy compliance.

Skills

Secure Software Development

DevSecOps

CI/CD integration

SAST/DAST/SCA

Threat modeling

Security testing tools

OWASP Top 10

Application security tools

Tools

Burp Suite

Fiddler

ZAP

Wireshark

Metasploit

SAST/DAST tools

API Gateway

WAF

Job description

Ascensus is seeking an Application Security Engineer to own and advance the secure software development program across its web and API platforms. You will embed with scrum teams, advise on security controls, and drive best practices in DevSecOps to protect data and maintain system integrity.

Responsibilities include architecture reviews, threat modeling, security testing in CI/CD, and enforcing coding standards. Strong collaboration with leadership and cross-functional teams is essential.