Remote AppSec Engineer: Automate & Harden SaaS

Arcadia; United States; À distance; USD 131 000 - 235 000; Plein temps

Avantages offerts par ce poste

Remote-first culture

Flexible PTO

12 holidays per year

Sick leave 10 days

Bereavement leave 4 weeks

Volunteer days off

Professional development days

Paid parental leave

Benefits coverage 75-95%

Résumé du poste

Arcadia, the AI-powered energy intelligence platform, is seeking a technically hands-on Application Security Engineer to own the vulnerability management lifecycle across SAST, DAST, and SCA tooling. You will integrate security automation into CI/CD, perform threat modeling, and advise a 300+ person engineering org.

Fully remote candidates within the US are welcome. The role emphasizes automation over ticketing, clear communication of risk to non-security engineers, and collaboration with

Qualifications

• 3–5 years of dedicated Application Security experience in a SaaS or cloud-native environment.
• Hands-on proficiency with at least two of the following: SAST, DAST, SCA, or CSPM tooling (e.g., Snyk, Checkmarx, Semgrep, Wiz).
• Strong working knowledge of CI/CD pipelines (e.g., GitHub Actions, Jenkins, GitLab CI) and the ability to write and maintain pipeline integrations.
• Experience with container security (Docker, Kubernetes) and API security patterns (REST, GraphQL).
• Demonstrated ability to communicate technical risk to non-security engineers in a way that drives action, not anxiety.

Responsabilités

• Own the end-to-end vulnerability management lifecycle: triage, prioritize, and drive remediation of findings from SAST, DAST, and SCA tooling in partnership with engineering squads.
• Maintain, optimize, and extend security tooling integrations within the CI/CD pipeline with the goal of automating everything that can be automated.
• Launch and run a Security Champions program, including workshops and office hours, to embed security knowledge directly into development teams across multiple geographies.
• Act as the application-layer subject matter expert during security incidents, supporting triage, root cause analysis, and remediation.
• Partner with Product and Engineering leadership to introduce security touchpoints earlier in the SDLC, including threat modeling and design review processes.

Connaissances

SAST tooling

DAST tooling

SCA tooling

CSPM tooling

CI/CD pipelines

Container security

API security

Communication to engineers

Outils

Snyk

Checkmarx

Semgrep

Wiz

Description du poste

Arcadia, the AI-powered energy intelligence platform, is seeking a technically hands-on Application Security Engineer to own the vulnerability management lifecycle across SAST, DAST, and SCA tooling. You will integrate security automation into CI/CD, perform threat modeling, and advise a 300+ person engineering org.

Fully remote candidates within the US are welcome. The role emphasizes automation over ticketing, clear communication of risk to non-security engineers, and collaboration with