Hybrid Application Security Engineer

gnw; Richmond (VA); Hybrid; USD 78,000 - 117,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive healthcare coverage

401(k) with employer match

Paid time off + holidays

Tuition reimbursement

Job summary

Genworth is seeking an Application Security Engineer to secure software across on-premises and cloud deployments. You will partner with engineering and security teams to implement secure development practices and address vulnerabilities.

The role emphasizes threat modeling, CI/CD security reviews, and governance alignments with SOC2, ISO 27001, and NIST standards. A hybrid work arrangement in the Richmond/Lynchburg area is offered.

Qualifications

• 3+ years in a Security Engineering role with Application Security, DevSecOps, and cloud security experience.
• Experience with vulnerability scanning tools and AST platforms.
• Experience securing applications in cloud environments (AWS/Azure/GCP).
• Formal threat modeling experience.

Responsibilities

• Operate and maintain application vulnerability scanning tools, AST platforms, and cloud security technologies.
• Collaborate with development teams to identify and remediate security vulnerabilities.
• Support security investigations and remediation activities.
• Administer and monitor security technologies and automation platforms.
• Participate in security assessments, threat modeling, and risk reduction initiatives.
• Generate reports and dashboards showing security findings and posture.
• Track KRIs and security scorecards; act as point of contact for security inquiries.
• Contribute to evaluating and implementing security tools and processes.

Skills

Vulnerability scanning

AST platforms

Cloud security tooling

Threat modeling

Project leadership

AWS/Azure/GCP

IaC & PaC

Secure SDLC

Security frameworks (SOC2 ISO 27001 N

Scripting (Python/PowerShell/Java)

Penetration testing

HIPAA/PHI/PCI compliance

Education

Computer Science or similar degree

Job description

Genworth is seeking an Application Security Engineer to secure software across on-premises and cloud deployments. You will partner with engineering and security teams to implement secure development practices and address vulnerabilities.

The role emphasizes threat modeling, CI/CD security reviews, and governance alignments with SOC2, ISO 27001, and NIST standards. A hybrid work arrangement in the Richmond/Lynchburg area is offered.