Remote Application Security Engineer: Secure the SDLC

Enersys; Reading (Berks County); Remote; USD 117,000 - 147,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision

Life insurance

Short/long-term disability

Tuition reimbursement

Flex spending

Employee stock purchase plan

401K plan

Job summary

EnerSys is seeking an Application Security Engineer to strengthen security across applications, platforms, and development processes. You will collaborate with software engineers, DevOps and security professionals to embed security into the software lifecycle while supporting compliance with cybersecurity frameworks.

The role is remote, with occasional international travel up to 15%. EnerSys offers comprehensive benefits and a long history of powering industries worldwide.

Qualifications

• Bachelor's degree in a technical field (CS/IS/Cybersecurity)
• 5+ years in Information Security with 3+ years in application security or DevSecOps
• Experience building/scaling an application security program
• Strong knowledge of OWASP Top 10/ASVS and SDLC security
• Hands-on experience with app sec testing tools (Burp/Veracode/etc)

Responsibilities

• Liaise between Cybersecurity and development teams to embed security in design, dev, deployment, and operations
• Conduct application security assessments, code reviews, API testing, threat modeling, and pen-testing
• Define and enforce secure coding standards and practices
• Integrate security tooling into CI/CD pipelines (SAST/DAST/SCA, IaC, container security)
• Support cloud-native security reviews, Kubernetes security, and threat modeling

Skills

Information Security

Application security

Security architecture

Threat modeling

Penetration testing

Education

Bachelor's degree in a technical field

Tools

Burp Suite

Fortify

Checkmarx

Veracode

ZAP

Job description

EnerSys is seeking an Application Security Engineer to strengthen security across applications, platforms, and development processes. You will collaborate with software engineers, DevOps and security professionals to embed security into the software lifecycle while supporting compliance with cybersecurity frameworks.

The role is remote, with occasional international travel up to 15%. EnerSys offers comprehensive benefits and a long history of powering industries worldwide.