Remote AppSec & Vulnerability Management Engineer

PSI Services; Salt Lake City (UT); Remote; USD 106,000 - 144,000; Full time

Job summary

PSI Services is seeking a Vulnerability Management and Application Security Engineer to protect cloud, infrastructure, and applications from evolving threats. The role emphasizes automation, scalability, and pragmatic risk reduction while partnering with engineering, product, and DevOps teams.

The position is Remote-US with a focus on embedding security earlier in development, reducing exploitable risk, and meeting internal security standards.

Qualifications

• Strong understanding of information security risk measurement and prioritization.
• Experience with security frameworks (NIST CSF/800-53, ISO 27001, OWASP).
• Ability to correlate threat intelligence with vulnerability and application risk.
• Hands-on AppSec testing and vulnerability management expertise.
• Experience integrating security tooling into CI/CD pipelines.

Responsibilities

• Drive vulnerability management improvements with automation and data-driven insights.
• Embed security into the SDLC and CI/CD pipelines with design reviews.
• Perform SAST, DAST, SCA, and manual secure code reviews where appropriate.
• Develop metrics and report KPIs to executives and stakeholders.
• Triages and manages vulnerabilities through remediation lifecycle.

Skills

Security risk measurement

NIST CSF/800-53

ISO 27001

OWASP

Threat intelligence

Vulnerability management

Cloud security

Tools

Qualys

Tenable

CrowdStrike

Job description

PSI Services is seeking a Vulnerability Management and Application Security Engineer to protect cloud, infrastructure, and applications from evolving threats. The role emphasizes automation, scalability, and pragmatic risk reduction while partnering with engineering, product, and DevOps teams.

The position is Remote-US with a focus on embedding security earlier in development, reducing exploitable risk, and meeting internal security standards.