Remote AppSec Engineer for Mission-Critical SaaS

Vannevar Labs; United States; Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401k matching

Unlimited PTO

Pet and child care reimbursement

Job summary

Vannevar Labs is hiring an Application Security Engineer to embed security into our SaaS platform and hyper-accelerate secure feature delivery. You will work with software, DevOps, and platform teams, coordinating audits to embed threat modeling and automated SAST/DAST/SCA, and drive rapid vulnerability response across the SDLC.

You will secure web apps, automate AppSec workflows, and mentor teams on secure-by-default practices while aligning with NIST RMF requirements and defense industry

Qualifications

• 5+ years in Application/Security for software products.
• Experience embedding security into SDLC and DevOps.
• Ability to translate risk for engineers and executives.
• Experience securing LLM workflows and AI pipelines.
• U.S. defense contractor context and trustworthiness.

Responsibilities

• Implement and deploy enterprise SAST, SCA, secrets-scan, DAST, and container/IaC checks in CI/CD
• Embed with development teams to run threat models and coach secure-by-default habits
• Drive a shift-left vulnerability detection program to identify and remediate earlier in SDLC
• Coordinate with DevOps for cross-layer security issues and incident-response
• Support audit readiness and feed security lessons back into code, docs, and processes

Skills

Application Security

DevSecOps

Threat Modeling

LLM Security

NIST RMF

Secure SDLC

Communication

Defense Contractor Experience

Tools

CI/CD tooling

SAST/DAST tools

Container Security

Job description

Vannevar Labs is hiring an Application Security Engineer to embed security into our SaaS platform and hyper-accelerate secure feature delivery. You will work with software, DevOps, and platform teams, coordinating audits to embed threat modeling and automated SAST/DAST/SCA, and drive rapid vulnerability response across the SDLC.

You will secure web apps, automate AppSec workflows, and mentor teams on secure-by-default practices while aligning with NIST RMF requirements and defense industry