Security Engineer — AppSec & Cloud Baselines Lead

Mechabits; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Mechabits is seeking a hands-on security engineer to help clients and internal teams design, review, and harden modern applications. You will work with product engineers on AppSec and cloud baselines that endure beyond engagements.

You will deliver clear risk language, practical remediation, and reusable playbooks for CI gates, while explaining risk to non-security stakeholders. The role emphasizes OWASP guidance and modern web/API stacks.

Qualifications

• Hands-on application or cloud security experience.
• Ability to explain risk without unnecessary jargon.
• Familiarity with OWASP and modern web / API stacks.
• Clear written English for async collaboration.

Responsibilities

• Perform architecture and application reviews aligned to OWASP practices
• Guide secure auth, secrets, and cloud baselines
• Support remediation with product engineering teams
• Contribute to reusable DevSecOps playbooks and CI gates
• Explain risk clearly to non-security stakeholders

Skills

Application security

Cloud security

OWASP awareness

Clear written English

Tools

CI/CD tools

Job description

Mechabits is seeking a hands-on security engineer to help clients and internal teams design, review, and harden modern applications. You will work with product engineers on AppSec and cloud baselines that endure beyond engagements.

You will deliver clear risk language, practical remediation, and reusable playbooks for CI gates, while explaining risk to non-security stakeholders. The role emphasizes OWASP guidance and modern web/API stacks.