Remote AppSec Engineer — Secure by Design & DevOps

Celink; United States; Remote; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

401(k) with employer match

Parental leave

Generous PTO & flexible work

Job summary

Celink is seeking an experienced Application Security Engineer to secure its internally developed applications, APIs, and support software delivery processes. You will collaborate with engineering, architecture, and DevOps to embed secure-by-design practices throughout the software lifecycle, review findings, and drive remediation.

The role emphasizes hands-on security testing, threat modeling, and improving security tooling within CI/CD pipelines, including guidance and training for development

Qualifications

• 5+ years of application security experience in enterprise environments.

Responsibilities

• Embed security requirements into the SDLC across engineering, architecture, and DevOps.
• Perform threat modeling and secure design reviews for internal applications and APIs.
• Review SAST/DAST/SCA results and help remediation based on risk.
• Define secure coding standards and guardrails for internal teams.
• Provide guidance on secure coding practices and remediation approaches.
• Improve authentication, authorization, secrets handling, logging, and secure config.
• Conduct security testing for web, API, and cloud applications; validate remediation.
• Maintain and optimize AppSec tooling in CI/CD workflows.

Skills

Secure SDLC

Threat modeling

Vulnerability remediation

Cloud security

Security testing

Education

Bachelor's degree

Tools

SAST tooling

DAST tooling

CI/CD security

OWASP practices

Job description

Celink is seeking an experienced Application Security Engineer to secure its internally developed applications, APIs, and support software delivery processes. You will collaborate with engineering, architecture, and DevOps to embed secure-by-design practices throughout the software lifecycle, review findings, and drive remediation.

The role emphasizes hands-on security testing, threat modeling, and improving security tooling within CI/CD pipelines, including guidance and training for development