[Hiring] Senior Application Security Engineer @Practical DevSecOps

Practical DevSecOps; United States; Remote; USD 100,000 - 140,000; Full time

Job summary

A globally recognized organization is seeking a Senior Application Security Engineer to enhance and develop security training programs for their DevSecOps initiatives. This remote position demands a candidate with substantial experience in application security and the ability to create engaging training materials, bridging theoretical knowledge with practical applications. The role involves evaluating emerging security trends and adapting training content for relevance, while contributing to open source security projects.

Qualifications

• 5-6 years experience in application security.
• Understanding of OWASP-aligned curricula.
• Proficiency in Python, Java, and JavaScript.

Responsibilities

• Conduct application security assessments.
• Develop security training exercises and educational materials.
• Support integration of security tools into CI/CD pipelines.

Skills

Technical problem-solving

Clear communication

Passion for DevSecOps

Self-motivated

Education

Relevant security certifications

Tools

SAST tools

DAST tools

Cloud security tools

Job description

May 30, 2025 - Practical DevSecOps is hiring a remote Senior Application Security Engineer. Location: India.

Job Type: Permanent(Full Time/Full-Time)
Function: Application Security Engineer

Location: Remote
Experience Required: 5-6 years

Position Overview

We are seeking an Application Security Engineer to join our team and help maintain, enhance, and develop security training exercises for our renowned DevSecOps, API Security, Threat Modeling and many other courses. The ideal candidate will bring technical security expertise while having the ability to create educational content that aligns with our practical, hands-on training approach.

Key Responsibilities

Training Content Excellence Fix and troubleshoot existing training exercises when issues arise from tool or environment version upgrades Modernize exercises by upgrading components when tools become outdated, maintaining industry relevance Create new, innovative security exercises that demonstrate real-world vulnerabilities using our open source projects Assist our training team in developing new courses aligned with emerging security domains Contribute to our open source security projects with practical, educational components

Application Security Implementation

Conduct application security assessments using methodologies taught in our training programs Help clients implement secure coding practices and remediation strategies based on our training principles Support integration of security tools into CI/CD pipelines using techniques from our courses Apply and reinforce the practical DevSecOps methodologies we advocate in our training

Knowledge Advancement

Stay current with security trends, adapting our training content to reflect the evolving threat landscape Develop educational materials that bridge theory and practice in DevSecOps Support instructors with technical expertise during course delivery Help maintain our position as thought leaders in practical DevSecOps implementation

Required Qualifications

Understanding of application security concepts, particularly those covered in our OWASP-aligned curricula Experience with security testing tools featured in our training (e.g., SAST/DAST tools, containers, cloud security) Proficiency in programming languages relevant to our courses (Python, Java, JavaScript) Knowledge of DevSecOps practices as applied in real-world environments Familiarity with the core domains we teach: DevSecOps, AI Security, API Security, and Threat Modeling Strong troubleshooting abilities to resolve complex training environment issues

Preferred Qualifications

Familiarity with our open source projects (DevSecOps Studio, DevSlop, etc.) Security certifications relevant to our training domains Experience creating educational content or technical documentation Background in developer education or security training Public speaking or training delivery experience

Skills

Strong technical problem-solving abilities Clear communication skills for explaining complex security concepts Passion for DevSecOps methodologies and security education Self-motivated approach to improving training materials Collaborative mindset to work effectively with our international team