Principal App Sec Engineer - Remote & AI-Forward Leader

Jobgether; United States; On-site; USD 172,000 - 240,000; Full time

Benefits offered by this job

Remote work within the United States

Competitive benefits package

Strong technical influence

Job summary

Jobgether is seeking a Principal Application Security Engineer in the United States. The role blends hands-on security engineering with strategic influence across applications, APIs, cloud environments, and CI/CD pipelines.

You will shape secure-by-design practices, automate protections, and advance security for AI-enabled development while reducing risk and enabling fast, secure delivery.

Qualifications

• 10+ years in Application Security Engineering with hands-on security integrated into software design and delivery.
• Deep expertise in secure architecture, secure coding, threat modeling, and app security assessments.
• Background in software engineering/architecture with ability to operate from design to runtime.
• Strong knowledge of authentication, authorization, session management, secrets management, API security, and OWASP Top 10 risks.
• Hands-on in securing stacks like C#, Java, Python, JavaScript/TypeScript, Go.
• Experience integrating SAST, SCA, DAST, IaC scanning, container security, API testing into CI/CD.
• Proven ability to investigate complex technical problems and deliver remediation.
• Excellent written and verbal communication to influence engineers and leadership.
• Experience creating security standards, playbooks, and reference architectures.
• Familiarity with software supply chain security, Zero Trust, policy-as-code, cloud-native security.
• Experience securing AI-enabled applications or advising on secure AI usage a plus.
• Experience with Azure, AWS, or GCP, Terraform, and Akamai protections advantageous.
• Experience as Security Champion / principal engineer with security responsibilities a plus.
• Ability to influence decentralized engineering organizations through standards and enablement.

Responsibilities

• Lead secure code reviews, threat modeling, and secure design assessments across applications and APIs; translate findings into guidance.
• Design and improve application security controls across CI/CD platforms and developer workflows.
• Identify gaps and drive remediation via automation and platform improvements.
• Define secure coding standards, reference architectures, playbooks, tooling, and scalable security capabilities.
• Act as a senior security advisor to engineering and platform teams; influence architecture and remediation strategies.
• Advance security for AI-enabled development; establish guardrails and responsible AI adoption.
• Provide deep API security expertise: authentication, authorization, monitoring, secure integration patterns.
• Partner with web/platform teams to deploy app-layer protections like WAF policies and rules.
• Strengthen software supply chain security through dependency management and SBOM practices.
• Define security metrics and risk-based reporting to guide improvements.

Skills

Secure coding

Threat modeling

API security

CI/CD security

Cloud security

Communication

Security standards

Tools

Terraform

AKAMAI protections

Job description

Jobgether is seeking a Principal Application Security Engineer in the United States. The role blends hands-on security engineering with strategic influence across applications, APIs, cloud environments, and CI/CD pipelines.

You will shape secure-by-design practices, automate protections, and advance security for AI-enabled development while reducing risk and enabling fast, secure delivery.