Remote Senior AppSec Engineer: Secure DevOps & AI Guardrails

Jobgether; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote work

Health and wellbeing programs

Professional development

Inclusive workplace

Job summary

Jobgether is seeking an experienced security leader to build scalable secure software development practices and threat modeling across apps, pipelines, and AI agents. You will architect CI/CD security controls, automate SAST/DAST/SCA workflows, and drive supply chain security, remediation, and developer enablement.

You will mentor teams, partner with product and DevOps, and translate security risk into business decisions with measurable outcomes in a remote US-based environment.

Qualifications

• At least 6 years of experience in Application Security, Product Security, or Secure Software Development.
• Experience designing security controls for CI/CD pipelines and repositories (GitHub, GitLab, Jenkins, etc.).
• Hands-on experience with SAST, DAST, SCA, and container scanning with measurable impact.
• Experience with WAF, API protection, and vulnerability remediation.
• Knowledge of build integrity, secrets management, and artifact signing (SLSA/NIST SSDF).
• Experience in AWS/Azure/GCP environments and OWASP Top 10 for web apps and APIs.
• Familiarity with LLM security frameworks and prompt/skill design is a plus.
• Ability to write production-grade automation/tools (Python/Java/Go/Node.js).

Responsibilities

• Build and scale secure software development lifecycle practices with guardrails.
• Develop vulnerability prioritization and drive remediation with measurable outcomes.
• Establish scalable threat modeling for apps, APIs, pipelines, and AI agents.
• Architect security controls for CI/CD platforms to default-secure pipelines.
• Design automated SAST/DAST/SCA and container scanning workflows.
• Automate API discovery, SBOM, secrets detection and supply chain security capabilities.
• Build AI-powered security tools to review PRs, identify insecure patterns, and propose remediations.
• Define guardrails for AI agents with least-privilege access and audit logging.
• Advise leaders and translate risk into business decisions with metrics.
• Mentor engineers and support a Security Champions program.

Skills

Application Security

Secure SDLC

CI/CD Security

Threat Modeling

OWASP Top 10

SAST/DAST/SBOM

LLM Security

Automation & Tooling

Security Champions

Tools

GitHub

GitLab

Jenkins

Azure DevOps

Sigstore

Job description

Jobgether is seeking an experienced security leader to build scalable secure software development practices and threat modeling across apps, pipelines, and AI agents. You will architect CI/CD security controls, automate SAST/DAST/SCA workflows, and drive supply chain security, remediation, and developer enablement.

You will mentor teams, partner with product and DevOps, and translate security risk into business decisions with measurable outcomes in a remote US-based environment.