Remote App Security Engineer — Threat Modeling & DevSecOps

CyberBlade; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

CyberBlade is seeking an Application Security Engineer to secure clients' applications across the software lifecycle, from design through deployment, with a focus on reducing risk in web, mobile, and API workloads. This role is remote from the United States and reports to Head of Security Operations.

You will perform manual and automated reviews, conduct security testing, practice threat modeling, and collaborate with DevSecOps to embed security into CI/CD.

Qualifications

• Proven security experience across web and mobile apps with OWASP risks.
• Hands-on pentesting with Burp Suite, ZAP, and fuzzers.
• Experience with threat modeling and risk assessment in architectures.
• Ability to integrate security into CI/CD pipelines and DevSecOps.

Responsibilities

• Identify vulnerabilities in the software lifecycle from design to deployment.
• Conduct manual and automated source code reviews to improve security.
• Collaborate with DevOps to secure CI/CD and automate testing.
• Train developers on secure coding practices and OWASP Top 10.

Skills

AppSec expertise

Vulnerability assessment

Threat modeling

CI/CD security

Cloud security

Scripting (Python)

Tools

Burp Suite

OWASP ZAP

SAST/DAST tools

Fuzzing tools

Job description

CyberBlade is seeking an Application Security Engineer to secure clients' applications across the software lifecycle, from design through deployment, with a focus on reducing risk in web, mobile, and API workloads. This role is remote from the United States and reports to Head of Security Operations.

You will perform manual and automated reviews, conduct security testing, practice threat modeling, and collaborate with DevSecOps to embed security into CI/CD.