Security Engineer – AppSec, Cloud & CI/CD (Remote)

Air Apps; États-Unis; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Remote-first approach

Apple hardware ecosystem

Flexible PTO

Annual Bonus

Health Insurance

Public Transportation Pass

Coverflex benefits package

Air Conference 2025 in Las Vegas

Résumé du poste

Air Apps is seeking an experienced security engineer to advance our AI-powered Personal & Entrepreneurial Resource Planner. You will model threats, conduct scans and pentests, and define secure coding practices across teams. Collaborate with DevOps to embed security in CI/CD, monitor incidents, and ensure ISO 27001/GDPR/SOC 2 compliance.

Remote-first with annual bonus and comprehensive Health Insurance. Experience in cloud security (AWS/Azure/GCP), IAM, encryption, and incident response is

Qualifications

• 4+ years in cybersecurity, application security, or security engineering.
• Knowledge of OWASP Top 10 and threat modeling techniques.
• Experience with vulnerability scanning tools and penetration testing methodologies.
• Ability to work with DevSecOps and integrate security into CI/CD pipelines.

Responsabilités

• Develop and implement threat modeling across applications and infrastructure.
• Conduct vulnerability scanning, pentesting, and security assessments.
• Define and enforce secure coding practices with development teams.
• Integrate security testing into CI/CD with DevOps collaboration.
• Monitor security incidents, perform root-cause analysis, and implement fixes.
• Ensure compliance with ISO 27001, GDPR, SOC 2 and related standards.
• Design IAM policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams for security reviews of features and APIs.
• Create incident response plans and security documentation.
• Stay ahead of emerging threats and security technologies.

Connaissances

Threat modeling

Secure coding principles

Vulnerability assessment

Penetration testing

Security monitoring

Scripting/Automation (Python,Bash,PS)

Cloud security (AWS/Azure/GCP)

IAM & encryption knowledge

DevSecOps

Incident response planning

Outils

Nessus

Qualys

Burp Suite

SIEM

IDS

Description du poste

Air Apps is seeking an experienced security engineer to advance our AI-powered Personal & Entrepreneurial Resource Planner. You will model threats, conduct scans and pentests, and define secure coding practices across teams. Collaborate with DevOps to embed security in CI/CD, monitor incidents, and ensure ISO 27001/GDPR/SOC 2 compliance.

Remote-first with annual bonus and comprehensive Health Insurance. Experience in cloud security (AWS/Azure/GCP), IAM, encryption, and incident response is