Remote Application Security Engineer | Secure SDLC Expert

Compu-Link; Austin (TX); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision

Health Savings Account

401(k) with match

Life insurance

Parental leave

Job summary

Celink seeks an experienced Application Security Engineer to secure its proprietary applications, APIs, and delivery processes. You will partner with engineering, architecture, and DevOps to embed secure practices across the development lifecycle, perform threat modeling, and guide remediation efforts.

You will help define secure coding standards, train developers, and support audits while advancing security tooling, reporting, and risk‑based decision making in a fast‑moving financial services

Qualifications

• Bachelor’s degree or equivalent in computer science, information security, software engineering, or related field.
• 5+ years in application security and secure SDLC with enterprise experience.
• CSSLP, CISSP or similar security credentials preferred.

Responsibilities

• Embed security requirements and secure‑by‑design practices into the software development lifecycle.
• Conduct threat modeling, secure design reviews, and architecture assessments for internal apps and APIs.
• Review SAST/DAST/Secrets results and prioritize remediation by risk and context.
• Define secure coding standards, guardrails, and security patterns for engineering teams.
• Provide hands‑on guidance on secure coding practices and vulnerability remediation.
• Improve application security controls, such as auth, secrets handling, logging, and configuration.

Skills

Threat modeling

Secure SDLC

SAST/DAST

CI/CD security

AWS

Education

Bachelor’s degree in CS/InfoSec

Tools

SAST tools

DAST tools

Secrets scanning

OWASP ZAP

Job description

Celink seeks an experienced Application Security Engineer to secure its proprietary applications, APIs, and delivery processes. You will partner with engineering, architecture, and DevOps to embed secure practices across the development lifecycle, perform threat modeling, and guide remediation efforts.

You will help define secure coding standards, train developers, and support audits while advancing security tooling, reporting, and risk‑based decision making in a fast‑moving financial services