Remote Application Security Engineer (DevSecOps)

Silversmith Capital Partners; United States; On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

Health care/ dependent care FSAs

401(k) with company match

PTO 15 days/year

10 company holidays

Job summary

Sound Physicians is seeking an Application Security Analyst to embed security into the software delivery lifecycle across development, cloud, and security teams. You will implement automated checks, perform threat modeling, and guide secure coding practices to ship safe software quickly.

The role emphasizes collaboration with engineering, platform, and security operations, with after‑hours incident response and on‑call rotation as part of responsibilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field and industry‑recognized certifications are desirable.
• 4+ years of application security, DevOps, cloud security, or related cybersecurity experience.
• Experience with secure development practices, threat modeling, and risk assessment.

Responsibilities

• Integrate security controls into CI/CD pipelines, including SAST/DAST/SCA, secret scanning, and IaC validation.
• Collaborate with developers and platform engineers to identify and remediate security risks early in the lifecycle.
• Conduct application security assessments, architecture reviews, and threat modeling for new and existing apps.

Skills

Application security concepts

SAST/DAST/SCA

Cloud security

CI/CD security

OWASP Top 10

Kubernetes security

Scripting (Python, PowerShell, Bash)

Education

Bachelor’s degree in Computer Science or related field

CSSLP / GWAPT / OSWE / CEH or similar

Tools

Veracode

Checkmarx

Fortify

SonarQube

Snyk

Burp Suite

Rapid7 InsightAppSec

Job description

Sound Physicians is seeking an Application Security Analyst to embed security into the software delivery lifecycle across development, cloud, and security teams. You will implement automated checks, perform threat modeling, and guide secure coding practices to ship safe software quickly.

The role emphasizes collaboration with engineering, platform, and security operations, with after‑hours incident response and on‑call rotation as part of responsibilities.