Hybrid AppSec Engineer: CI/CD Automation & AI Triage

The Mom Project; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical

Dental

401k (no match)

Job summary

The Mom Project is seeking a Technical Application Security Engineer on a contract basis to support our business needs. This role is hybrid in New York, NY or Charlotte, NC, and the position is a 6-month contract to hire.

You will lead the AppSec tooling stack, define secure SDLC requirements, and collaborate with engineering teams to implement AI-assisted triage workflows while mitigating risk across multiple business units.

Qualifications

• 7+ years in application security, product security, or security engineering.
• Hands-on experience deploying and operating modern AppSec tooling.
• Proficiency in reading and triaging findings in multiple languages.
• Strong scripting and automation skills with REST API integrations and CI/CD.
• Proven ability to influence engineering teams without direct authority.
• Knowledge of OWASP Top 10 and threat modeling methodologies.

Responsibilities

• Application discovery and inventory across all business units.
• Operate AppSec tooling stack integrated into CI/CD pipelines.
• Design AI-assisted triage workflows to reduce false positives.
• Define secure SDLC requirements and threat modeling practices.
• Partner with development leaders to operationalize AppSec without delaying delivery.
• Evaluate AI security tools and report on their impact.
• Produce executive-ready metrics linking AppSec to risk reduction.

Skills

AppSec tooling

Python

JavaScript/TypeScript

Java

C#

Go

CI/CD automation

REST API integrations

Threat modeling

Tools

Semgrep

Snyk

Checkmarx

Veracode

Apiiro

Ox Security

GitHub Advanced Security

Job description

The Mom Project is seeking a Technical Application Security Engineer on a contract basis to support our business needs. This role is hybrid in New York, NY or Charlotte, NC, and the position is a 6-month contract to hire.

You will lead the AppSec tooling stack, define secure SDLC requirements, and collaborate with engineering teams to implement AI-assisted triage workflows while mitigating risk across multiple business units.