Remote Software Security Engineer: Secure SDLC & Cloud

Apex Systems; Dearborn (MI); On-site; USD 69,000 - 96,000; Full time

Job summary

Apex Systems is seeking a Software Security Engineer to ensure secure software throughout the development lifecycle. You will partner with product, software development, architecture, DevOps, and cybersecurity teams to integrate security tools and practices while ensuring compliance with industry standards and regulations.

The ideal candidate has extensive experience in cybersecurity, secure SDLC, and cloud environments across Azure, GCP, and AWS.

Qualifications

• 6+ years of IT experience
• 4+ years of software development experience
• Experience with application security, cybersecurity, or secure software development preferred
• CISSP, CISA, CISM, or similar certifications are highly valued

Responsibilities

• Perform security plan reviews and secure code reviews for flagship services, products, and partner applications.
• Guide development teams in triaging and remediating findings from SAST, DAST, SCA, bug bounty programs, and vulnerability assessments.
• Develop automation scripts and tools to help identify and remediate security vulnerabilities.
• Serve as a security advocate within development teams and promote secure software development practices.
• Collaborate with software architects, developers, and DevOps teams to integrate security throughout the SDLC and CI/CD pipelines.
• Provide guidance on secure architecture, API security, IAM, logging, encryption, data protection, and secure coding practices across Azure, GCP, and AWS environments.
• Define and maintain security best practices based on current threats and vulnerabilities.
• Ensure access controls, data encryption, and data anonymization requirements are followed.
• Partner with incident response teams during security incidents and incorporate lessons learned into product and system hardening.
• Work with engineering teams to ensure security vulnerabilities are addressed within established SLAs.
• Support software supply-chain security, SBOM requirements, technical debt, and upgrade planning.
• Maintain security requirements, test plans, and other cybersecurity documentation.
• Support cybersecurity compliance activities, risk assessments, and related security requirements.
• Communicate complex technical risks clearly to both technical and business stakeholders.

Skills

Cybersecurity / Application Security

Software Development and Secure SDLC

Scripting and automation

Web applications and web technologies

TCP/IP and network fundamentals

Software development lifecycle

Troubleshooting and problem solving

Data integrity and data modeling

Security vulnerability remediation

Experience with developers and DevOps

Two programming languages or advanced

Strong communication and analytical

Education

Bachelors degree

Masters degree

Tools

Burp Suite

Dynatrace

Salesforce

Pega

Apache Tomcat

Spring Security

Spring Boot

Linux

React

REST/API security

Azure

GCP

AWS

Job description

Apex Systems is seeking a Software Security Engineer to ensure secure software throughout the development lifecycle. You will partner with product, software development, architecture, DevOps, and cybersecurity teams to integrate security tools and practices while ensuring compliance with industry standards and regulations.

The ideal candidate has extensive experience in cybersecurity, secure SDLC, and cloud environments across Azure, GCP, and AWS.