Remote Senior Application Security Engineer: Secure Coding

Bold Penguin; Dublin (OH); On-site; USD 130,000 - 170,000; Full time

Job summary

Bold Penguin is seeking a Senior Application Security Engineer to strengthen the security of our applications, embed security into CI/CD, and drive secure development practices across teams. You will triage, remediate vulnerabilities in code, lead threat modeling, and maintain OWASP standards while collaborating with development and infrastructure to deliver secure software at pace.

This remote role emphasizes hands-on tooling, security architecture, and timely delivery of security projects

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or relevant work experience.
• 4–6 years of practical experience in application security, secure software engineering or software engineering with a strong security focus.
• Hands-on development ability in one or more languages used in modern web platforms (e.g., Python, JavaScript/TypeScript, Go, or Java).
• Deep knowledge of the OWASP Top 10, web/API vulnerability classes, and secure coding practices.
• Hands-on experience with SAST/DAST/SCA and integrating them into developer workflows.
• Experience performing threat modeling and security-focused code reviews.
• Working knowledge of application security in a cloud environment (AWS preferred).
• Strong collaboration and communication skills to influence developers and secure code.

Responsibilities

• Identify, triage, and remediate vulnerabilities directly in code and shepherd fixes through review and deployment.
• Validate and reproduce findings to reduce false positives and drive remediation to SLA.
• Operate and improve app security tooling (SAST, DAST, SCA, secrets, container scans) in pipelines.
• Embed security into CI/CD and Git workflows so vulnerabilities are caught automatically and fixed.
• Partner with development teams to define and roll out secure coding standards and pre-commit checks.
• Lead threat modeling for new features and perform security-focused code reviews.
• Maintain security standards (OWASP Top 10, input validation, secure APIs).
• Strengthen software supply chain and repository security.
• Prepare evidence for audits (SOC 2, NYDFS, PCI DSS).
• Coach developers through enablement and incident response support.

Skills

Application security

Secure software engineering

Security tooling

Threat modeling

Cloud security (AWS)

OWASP Top 10

Collaboration & communication

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity

Tools

SAST

DAST

SCA / dependency scanning

Secrets scanning

Container security

Kubernetes security

Terraform

Job description

Bold Penguin is seeking a Senior Application Security Engineer to strengthen the security of our applications, embed security into CI/CD, and drive secure development practices across teams. You will triage, remediate vulnerabilities in code, lead threat modeling, and maintain OWASP standards while collaborating with development and infrastructure to deliver secure software at pace.

This remote role emphasizes hands-on tooling, security architecture, and timely delivery of security projects