Remote LATAM AppSec Architect: Threat Modeling & SDLC

Prediktive; New York (NY); Remote; USD 130,000 - 190,000; Full time

Job summary

Prediktive is seeking an Application Security Engineer (Remote LATAM) to lead security across our client projects, including a nonprofit organization in New York. You will shape secure design, conduct reviews, and drive secure coding practices across the development teams.

You will work on integrating SAST/DAST/SCA into CI/CD, mentor engineers, and oversee vulnerability management while coordinating with cloud and identity security efforts.

Qualifications

• 8+ years in application security or security engineering.
• Strong knowledge of web and API vulnerabilities (OWASP).
• Hands-on with SAST/DAST/SCA and CI/CD integration.
• Experience leading threat modeling and security architecture reviews.
• Experience reviewing AI-generated code for security risks.

Responsibilities

• Lead application security across engineering and secure the SDLC.
• Conduct architecture reviews, threat modeling, and secure code reviews.
• Mentor engineers on security and lead high-risk reviews.
• Integrate SAST/DAST/SCA in CI/CD and manage secrets detection.
• Perform hands-on security testing of apps, APIs, and cloud infra.
• Review AI-assisted code for security risks and set guardrails.
• Drive vulnerability management and maintain threat models/docs.
• Support bug bounty/vulnerability disclosure programs.
• Build scalable security programs and reusable patterns.
• Respond to incidents and participate in on-call rotations.

Skills

Advanced English

OWASP Top 10

CI/CD security

Threat modeling

SAST/DAST/SCA

AI-assisted security

Security architecture reviews

APIs security

On-call incident response

Education

Bachelor's degree in CS or related field

Tools

CI/CD tooling

IaC review (Terraform/CDK)

Job description

Prediktive is seeking an Application Security Engineer (Remote LATAM) to lead security across our client projects, including a nonprofit organization in New York. You will shape secure design, conduct reviews, and drive secure coding practices across the development teams.

You will work on integrating SAST/DAST/SCA into CI/CD, mentor engineers, and oversee vulnerability management while coordinating with cloud and identity security efforts.