Remote Senior Application Security Engineer

Bright Vision Technologies; SOUTH PLAINFIELD (NJ); Remote; USD 100,000 - 160,000; Full time

Job summary

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

The role blends hands‑on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field.
• Ten+ years in application security or security engineering.
• Strong knowledge of OWASP Top 10 and modern exploit patterns.
• Hands-on code-review experience across at least two major languages.
• Deep familiarity with SAST/DAST/CI/CD-integrated security tooling.
• Understanding of authentication, authorization, and cryptographic primitives.

Responsibilities

• Conduct threat modeling and security architecture reviews for new and existing apps/services.
• Perform manual code reviews and secure design consultations with engineering teams.
• Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines.
• Drive vulnerability management workflows including triage and remediation.
• Develop secure patterns by building pave d-road libraries and frameworks.
• Lead red-team and purple-team exercises and drive remediation of weaknesses.
• Respond to security incidents involving application vulnerabilities or active exploitation.

Skills

OWASP Top 10

Threat modeling

Code review

CI/CD security tooling

Cloud security

Software tooling

Agile

Education

Bachelor's degree in Computer Science or related field

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Secret scanning tools

Job description

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

The role blends hands‑on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down.