Remote Application Security Engineer - DevSecOps & Cloud

Sound Physicians; United States; Hybrid; USD 75,000 - 110,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

401(k) with company match

PTO + holidays

Job summary

Sound Physicians is seeking an Application Security Analyst to embed security into the software delivery lifecycle and reduce risk through automation and continuous testing. You will partner with development, platform, cloud, and security teams to ship secure software quickly and safely.

The ideal candidate has strong application security knowledge, secure coding practices, cloud controls, vulnerability management, and modern DevSecOps experience, with on-call rotation as part of duties.

Qualifications

• Bachelor’s degree in CS or security field.
• 4+ years in application security or related roles.
• Experience in regulated environments preferred.
• Strong understanding of DevSecOps practices.
• Ability to communicate remediation to technical and non-technical stakeholders.

Responsibilities

• Integrate security checks into CI/CD pipelines (SAST/DAST/SCA).
• Work with developers and platform engineers to remediate risks early.
• Perform architecture reviews and threat modelling.
• Manage vulnerability tracking and remediation SLAs.
• Conduct secure code reviews per OWASP Top 10 and industry standards.
• Develop secure pipeline standards and policy-as-code checks.
• Collaborate on incident response and hardening activities.
• Create docs, standards, and training materials.
• Track security metrics and improve maturity across build, release, and runtime workflows.

Skills

Application security

Secure coding

Cloud security

CI/CD tools

OWASP Top10

SAST/DAST/SCA

Kubernetes security

Python scripting

Threat modeling

Communication skills

Education

CS/InfoSec degree

Security certs (CSSLP/GWAPT/OSWE/CEH)

Tools

Veracode

Burp Suite

Snyk

Checkmarx

Fortify

SonarQube

GitHub Actions

Job description

Sound Physicians is seeking an Application Security Analyst to embed security into the software delivery lifecycle and reduce risk through automation and continuous testing. You will partner with development, platform, cloud, and security teams to ship secure software quickly and safely.

The ideal candidate has strong application security knowledge, secure coding practices, cloud controls, vulnerability management, and modern DevSecOps experience, with on-call rotation as part of duties.