Hybrid App Security Engineer: DevSecOps & Cloud

Purpose Brands, LLC; Woodbury (MN); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid Work Environment

Medical, Dental and Vision Coverage

401(K) Savings Plan Matching at 4%

Mental Health Benefits

Professional Development Opportunities

Job summary

Purpose Brands LLC is seeking an Application Security Engineer to advance security across the software delivery lifecycle in a DevSecOps model. You will embed security controls, automate testing, and collaborate with software, DevOps, and cloud teams to mature security processes in AWS and Azure environments.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement, with a hybrid work setup across multiple offices, including Minnesota.

Qualifications

• Bachelor's degree in a related field.
• 3–5 years of application security, security engineering, or software engineering with a security focus.
• Hands-on experience performing code reviews and security testing across modern languages and APIs.
• Experience with SAST, DAST, and dependency scanning (GitHub Dependabot or similar).
• Strong understanding of OWASP Top 10 and API security.

Responsibilities

• Embed secure SDLC practices across the software delivery lifecycle.
• Integrate security tooling into CI/CD pipelines for automated testing.
• Analyze and manage vulnerability findings from security tools.
• Assist in securing AWS and Azure deployments.
• Collaborate with engineering teams to reduce risk without slowing delivery.
• Provide guidance and actionable security recommendations to developers.

Skills

Code review

SAST

DAST

OWASP Top 10

CI/CD

DevSecOps

Cloud security

Threat modeling

Communication

Analytical skills

Education

Bachelor’s degree in CS/IS/Engineering

Tools

GitHub Advanced Security

Syft

Clair

Qualys

Dependabot

Job description

Purpose Brands LLC is seeking an Application Security Engineer to advance security across the software delivery lifecycle in a DevSecOps model. You will embed security controls, automate testing, and collaborate with software, DevOps, and cloud teams to mature security processes in AWS and Azure environments.

The role emphasizes hands-on security engineering, tooling integration, and developer enablement, with a hybrid work setup across multiple offices, including Minnesota.