Hybrid AppSec Engineer: CI/CD Automation & AI Triage

BBG Ventures, LLC; Charlotte (NC); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, and 401k (no match)

Job summary

Unknown company is seeking a Technical Application Security Engineer on a hybrid basis in New York, NY or Charlotte, NC. The role is a 6-month contract to hire with responsibilities spanning AppSec tooling implementation, secure SDLC design, and AI-assisted triage workflows.

Requirements include 7+ years in application security, hands-on tooling experience (SAST, SCA, secrets scanning), proficiency in Python and at least three languages, and ability to influence engineering without direct

Qualifications

• 7+ years in application security or security engineering with multiple business units

Responsibilities

• Inventory and risk tiering across units
• Operate AppSec tooling in CI/CD pipelines
• Design AI-assisted triage workflows to reduce noise
• Define secure SDLC requirements and security gates
• Partner with development leaders to operationalize AppSec
• Evaluate and propose AI security tooling and strategies
• Produce executive-ready metrics linking activity to risk reduction

Skills

AppSec tooling

Python

JavaScript/TypeScript

CI/CD automation

REST APIs

Threat modeling

Tools

Semgrep

Snyk

Checkmarx

Veracode

Apiiro

GitHub Advanced Security

Ox Security

Job description

Unknown company is seeking a Technical Application Security Engineer on a hybrid basis in New York, NY or Charlotte, NC. The role is a 6-month contract to hire with responsibilities spanning AppSec tooling implementation, secure SDLC design, and AI-assisted triage workflows.

Requirements include 7+ years in application security, hands-on tooling experience (SAST, SCA, secrets scanning), proficiency in Python and at least three languages, and ability to influence engineering without direct