Security Automation & AppSec Engineer

Anchorage; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

Anchorage Digital is seeking a security-focused professional to build and maintain automation for vulnerability detection across code and live systems. You will conduct security assessments, perform code reviews, and guide secure development practices.

You will develop vulnerability management workflows, establish guardrails for code and cloud resources, and lead incident response activities while collaborating with Engineering, Infrastructure, and Compliance teams to improve security across the

Qualifications

• 3+ years of hands-on experience in security engineering, appsec, pentesting, or security operations.
• Experience building or maintaining security tools, integrations, or automation workflows using Python, Go, or similar.
• Experience with static and dynamic analysis to identify issues in code and live systems.

Responsibilities

• Build and maintain security automation and tooling to detect vulnerabilities through static and dynamic analysis across code and live systems.
• Conduct security assessments, penetration tests, and code reviews to identify high-risk issues and provide secure development guidance.
• Develop and operate vulnerability management workflows with engineering teams to prioritize and remediate findings.
• Establish and test security guardrails for code, cloud resources, and infrastructure across the Anchorage platform.

Skills

Security engineering

AppSec

Penetration testing

Security operations

Security tooling & automation

Cloud security

Incident response

Communication

Bug bounty collaboration

Tools

Semgrep

CodeQL

Burp Suite

Job description

Anchorage Digital is seeking a security-focused professional to build and maintain automation for vulnerability detection across code and live systems. You will conduct security assessments, perform code reviews, and guide secure development practices.

You will develop vulnerability management workflows, establish guardrails for code and cloud resources, and lead incident response activities while collaborating with Engineering, Infrastructure, and Compliance teams to improve security across the