Remote Senior DevSecOps & Application Security Engineer

3Core Systems, Inc; Chicago, Northern (IL, KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

3Core Systems, Inc. is seeking a Senior Application Security Engineer to drive DevSecOps initiatives for multiple applications in a remote USA role. You will embed security into the SDLC, perform AI-assisted and traditional security assessments, and manage code and cloud security tooling across teams.

You will collaborate with architects, developers, and product owners to implement secure coding practices, establish metrics, and deliver secure software at scale.

Qualifications

• 5-7 years of hands-on application security/DevSecOps experience.
• Secure SDLC, DevSecOps, Agile, and Scrum methodologies — strong working understanding.
• Experience with security tooling and reading production code in Java and Python.
• Knowledge of OWASP Top 10, API Security Top 10, and secure coding principles.
• Cloud security, IAM, and modern app architectures; AI-assisted development tools.

Responsibilities

• Embed security into the SDLC by defining and improving standards and workflows.
• Perform AI-assisted and traditional security assessments of applications, APIs, and cloud workloads.
• Manage repository scanning coverage and triage findings by exploitability and impact.
• Drive remediation from discovery through verified closure and reduce security debt.
• Build security metrics and executive dashboards for leadership visibility.
• Coach and promote a security-first culture across delivery teams.

Skills

Agile

API

Artificial Intelligence

Cloud

SDLC

Security

Vulnerability

Education

Bachelor's degree in CS/CS-related field

Master's degree

Tools

Burp Suite

GitHub Advanced Security

CodeQL

SAST

SCA

Secret scanning

Dependency analysis

CI/CD security tooling

Job description

3Core Systems, Inc. is seeking a Senior Application Security Engineer to drive DevSecOps initiatives for multiple applications in a remote USA role. You will embed security into the SDLC, perform AI-assisted and traditional security assessments, and manage code and cloud security tooling across teams.

You will collaborate with architects, developers, and product owners to implement secure coding practices, establish metrics, and deliver secure software at scale.