Lead Application Security Engineer

Talentify; Philadelphia (Philadelphia County); On-site; USD 120,000 - 150,000; Full time

Job summary

Talentify is seeking an Application Security Engineer in Philadelphia, a 6-month contract to hire. You will inventory applications and pipelines, define risk tiers, and socialize a minimum AppSec baseline across decentralized engineering teams.

You will lead threat modeling, build a Security Champions program, and guide migrations with secure-by-design guidance while coordinating remediation with development teams.

Qualifications

• 4+ years in software engineering, cloud engineering, or application security with hands-on security work.
• Experience threat modeling (STRIDE, PASTA) or translating findings into engineering actions.
• Strong software or cloud engineering ability with security instincts.
• AppSec depth: OWASP Top 10/ASVS, CWE Top 25, modern web/API security patterns.
• Experience integrating security tooling into CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI, Jenkins).
• Knowledge of authentication/authorization patterns: OAuth 2.0, OIDC, SAML, session management.
• Familiarity with Docker/Kubernetes and cloud-native security considerations.
• Ability to communicate risk to engineers in actionable terms.
• Bachelor's degree or equivalent practical experience.

Responsibilities

• Inventory and assess the environment by cataloging applications, pipelines, repos, and AppSec tooling.
• Create a risk-tiering model to focus security efforts on high-risk applications.
• Define a minimum AppSec baseline and socialize it with engineering leadership.
• Build and lead a Security Champions program across engineering teams.
• Lead threat modeling for modernization, including monolith-to-microservices re-architecture.
• Provide secure-by-design guidance on migration decisions before architecture is locked.
• Own inventory, risk tiers, and coverage metrics, plus remediation metrics.
• Triage vulnerabilities from tooling, pen tests, bug bounties, and alerts; drive remediation with teams.
• Partner with Security Operations on incidents and validate remediation paths.

Skills

4+ years

Threat modeling

Cloud engineering

AppSec depth

CI/CD security tooling

Authn/Authz patterns

Containerization/cloud-native

Security communication

BSCS or related field

Education

Bachelor's degree in computer science or related field

Tools

Fortify

Veracode

Wiz Code

Job description

Talentify is seeking an Application Security Engineer in Philadelphia, a 6-month contract to hire. You will inventory applications and pipelines, define risk tiers, and socialize a minimum AppSec baseline across decentralized engineering teams.

You will lead threat modeling, build a Security Champions program, and guide migrations with secure-by-design guidance while coordinating remediation with development teams.