Remote AppSec Engineer: Secure SDLC & APIs

Far Coder; Northern (KY); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Remote US

Office in Manhattan

Unlimited vacation

Technology stipend

WFH stipend

Wellness stipend

Retirement plan

Parental leave

Family benefits

DICK'S Sporting Goods discount

Job summary

GameChanger is seeking a Security Engineer to own application security across the SDLC and to partner with software engineers to bake secure design and DevSecOps into our delivery process.

You will conduct secure code reviews, enforce secure API patterns, and collaborate across teams to embed security into CI/CD and cloud deployments leveraging AWS, Terraform, and Kubernetes. This remote-first role offers broad influence and cross-functional impact.

Qualifications

• 3+ years in application security engineering.
• Proven experience building and operating internal security developer platforms or tooling.
• Demonstrated ability to use AI/ML-driven tools to enhance security effectiveness and scalability.
• Hands-on experience leading threat modeling engagements and designing paved roads.
• Proven track record integrating security tooling into CI/CD pipelines.
• Working knowledge of OWASP Top 10s (web, mobile, API, LLM).
• Hands-on experience securing deployments in AWS with container and Kubernetes security, IaC scanning, and policy-as-code approaches.
• Demonstrated expertise in security-by-design in TypeScript, Swift, and/or Kotlin.
• Track record of implementing secure primitives in mobile ecosystems (iOS/Android).
• Beneficial certifications: AWS Certified Security Specialty, CKS, GWEB, GMOB, or equivalent.

Responsibilities

• Embed security into every phase of the SDLC.
• Champion security requirements for responsible integration of Gen AI tools within our product stack.
• Conduct security-by-design engagements for new features, APIs, and infrastructure changes.
• Perform secure code reviews with actionable remediation guidance.
• Partner with architecture and platform teams to establish secure API patterns (REST and GraphQL).
• Contribute to secure coding guidelines, API security standards, and security architectural patterns.

Skills

Application security engineering

AI/ML security tooling

Threat modeling

CI/CD security

Kubernetes security

AWS security

Security-by-design

Secure code reviews

Tools

GitHub Actions

Terraform

Kubernetes tooling

Job description

GameChanger is seeking a Security Engineer to own application security across the SDLC and to partner with software engineers to bake secure design and DevSecOps into our delivery process.

You will conduct secure code reviews, enforce secure API patterns, and collaborate across teams to embed security into CI/CD and cloud deployments leveraging AWS, Terraform, and Kubernetes. This remote-first role offers broad influence and cross-functional impact.