Lead Application Security Engineer: Define Secure SDLC

InfraTech Solutions; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

InfraTech Solutions is seeking a Senior Application Security Engineer to own and drive the company’s application security program. You’ll work hands-on with engineering teams to embed secure development practices and guide security for new features and services.

This high-impact role shapes the future of AppSec within a security-focused product environment, collaborating across Ruby on Rails web apps, React Native mobile apps, and Python/Go projects.

Qualifications

• 3–7+ years of experience in Application Security, Product Security, or related engineering roles.
• Strong understanding of secure coding practices, common vulnerabilities (OWASP Top 10), and modern SDLC.
• Experience working with cloud-native applications, ideally in AWS.
• Understanding of SSL certificates & cryptographic key management
• Hands-on experience with SAST, DAST, WAFs, and/or mobile application security tools.
• Ability to partner effectively with developers and influence secure design decisions.
• Familiarity with GitHub-based workflows and CI/CD pipelines.

Responsibilities

• Lead and evolve the company’s application security strategy, roadmap, and day-to-day operations.
• Serve as the primary AppSec partner for dev teams working on Rails web apps, React Native mobile apps, and Python/Go services.
• Provide security guidance during design, development, and code review for new features and projects.
• Drive adoption of secure coding practices and threat-modeling across engineering teams.
• Build secure development standards, playbooks, and training materials.

Skills

AppSec

Secure coding

Cloud AWS

SAST

DAST

CI/CD

Tools

GitHub Advanced Security

Invicti

Hadrian

AppDome

Cloudflare WAF

Job description

InfraTech Solutions is seeking a Senior Application Security Engineer to own and drive the company’s application security program. You’ll work hands-on with engineering teams to embed secure development practices and guide security for new features and services.

This high-impact role shapes the future of AppSec within a security-focused product environment, collaborating across Ruby on Rails web apps, React Native mobile apps, and Python/Go projects.