Local Senior Application Security Engineer – Hands-on

Experienced Recruiting Partners, LLC.; City of Albany (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Experienced Recruiting Partners, LLC. is seeking an Application Security Engineer to lead security coding efforts within a multi-tier Java/Web environment. You will work with development teams to diagnose and remediate vulnerabilities, champion secure SDLC practices, and advance CI/CD security tooling across deployments.

The role emphasizes hands-on security assessments, collaboration with leadership, and ongoing research into attack vectors and trends to strengthen defenses.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent experience.
• 8+ years IT experience; 5+ years in software development/architecture roles.
• Strong secure coding background in Java/Web development, RHEL, and JBoss.
• 3+ years in Application Security Engineering with assessments and tooling (dynamic/static analysis).
• Experience integrating AI-driven code analysis into CI/CD pipelines; ability to train teams.

Responsibilities

• Diagnose, document, and remediate application security vulnerabilities; identify security checkpoints in SDLC.
• Perform risk-based assessments and penetration tests using dynamic and static scanning tools; ensure industry standards compliance.
• Consult with Development leadership on secure development training.
• Research new attack vectors and stay current with cybersecurity trends.
• Design and execute repeatable remediation prioritization; report risk status to leadership.

Skills

Secure Java/Web

CI/CD security

Penetration testing

Static/Dynamic analysis

Communication

Critical thinking

Collaboration

Education

Bachelor's degree in Computer Science or related field

Equivalent combination of education and experience

Tools

Fortify

SonarQube

Job description

Experienced Recruiting Partners, LLC. is seeking an Application Security Engineer to lead security coding efforts within a multi-tier Java/Web environment. You will work with development teams to diagnose and remediate vulnerabilities, champion secure SDLC practices, and advance CI/CD security tooling across deployments.

The role emphasizes hands-on security assessments, collaboration with leadership, and ongoing research into attack vectors and trends to strengthen defenses.