Remote AppSec Engineer: SDLC & Remediation (Contract)

TCWGlobal; San Mateo (CA); Remote; USD 82,000 - 117,000; Full time

Job summary

TCWGlobal is seeking an Application Security Engineer for a 6-month contract. The role is fully remote, with pay up to $72.10 per hour.

You will validate SAST/SCA results, investigate vulnerabilities, and work with developers to remediate and embed secure practices into the SDLC. Ideal candidates have 2+ years in software development, hands-on experience with Java/Go/Python/Perl, and a solid understanding of OWASP Top 10 and security architectures.

Qualifications

• 2+ years of experience in software development.
• Bachelor’s degree or equivalent experience in a related field.
• Experience with multiple languages (Java, Go, Python, Perl).
• Understanding of OWASP Top 10 and remediation methods.
• Experience with scalable, secure enterprise architectures.
• Experience participating in security architecture and feature design reviews.
• Strong written and verbal communication skills.

Responsibilities

• Partner with software engineers to identify and address security risks across the SDLC.
• Analyze SAST and SCA results to identify potential vulnerabilities.
• Investigate vulnerabilities, assess applicability, and perform risk analysis as needed.
• Configure and fine-tune security scanning tools to improve accuracy.
• Communicate findings to developers and track remediation progress.
• Collaborate with security engineers and development teams to align with release timelines.
• Support security architecture and design reviews to identify risks early in development.
• Evaluate security risks across enterprise architectures and multi-tier systems.

Skills

Software development

Java

Go

Python

Perl

OWASP Top 10

Communication

Security architecture

Education

Bachelor’s degree in Computer Science/Information Security/Cybersecurity

Tools

AWS

Akamai

Security scanning tools

Job description

TCWGlobal is seeking an Application Security Engineer for a 6-month contract. The role is fully remote, with pay up to $72.10 per hour.

You will validate SAST/SCA results, investigate vulnerabilities, and work with developers to remediate and embed secure practices into the SDLC. Ideal candidates have 2+ years in software development, hands-on experience with Java/Go/Python/Perl, and a solid understanding of OWASP Top 10 and security architectures.