Remote AppSec Engineer: Secure SDLC & Cloud

Bright Vision Technologies; Palo Alto (CA); On-site; USD 80,000 - 100,000; Full time

Job summary

Bright Vision Technologies is seeking an AppSec Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

The role blends hands-on offensive and defensive security with strong communication and collaboration, helping development teams build secure software efficiently.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 6+ years of application security or security engineering experience.
• Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
• Hands-on experience performing code review across at least two major languages.
• Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling.
• Strong understanding of authentication, authorization, and cryptographic primitives.
• Experience with cloud security and modern infrastructure controls.
• Strong communication skills with technical and non-technical audiences.
• Proficiency in at least one programming language for tooling and automation.
• Experience working closely with engineering teams in an Agile environment.

Skills

OWASP Top 10

Code review

SAST tooling

DAST tooling

CI/CD security

Cloud security

Authentication & Authorization

Programming for tooling

Agile collaboration

Education

Bachelor's degree in CS/Cybersecurity

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Cloud security tools

Job description

Bright Vision Technologies is seeking an AppSec Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

The role blends hands-on offensive and defensive security with strong communication and collaboration, helping development teams build secure software efficiently.