Senior App Sec Engineer: Lead Secure SDLC & Threat Modeling

Arkhya Tech Inc.; Charlotte (NC); On-site; USD 140,000 - 210,000; Full time

Job summary

Arkhya Tech Inc. is seeking an accomplished Application Security professional to champion security practices across development teams and drive a security-first culture in a dynamic environment.

You will lead security reviews, threat modeling, and code assessments, collaborating with risk, compliance, and infrastructure teams to enforce standards and policies. The role demands deep expertise in SAST/DAST/SCA and secure SDLC, with hands-on dev experience in Java, Python, or .NET.

Qualifications

• 12+ years of experience in application security, development, or related cybersecurity roles.
• Deep expertise in SAST, DAST, SCA, vulnerability management, and secure SDLC.
• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).
• Hands-on experience with application development (Java, Python, .NET, or similar).
• Experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.
• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.

Responsibilities

• Champion application security best practices across development teams and Lines of Business (LOBs).
• Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.
• Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.
• Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.
• Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.
• Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

Skills

App security

Threat modeling

Vulnerability management

Secure SDLC

Cloud security

Tools

SAST

DAST

SCA

CI/CD security

Job description

Arkhya Tech Inc. is seeking an accomplished Application Security professional to champion security practices across development teams and drive a security-first culture in a dynamic environment.

You will lead security reviews, threat modeling, and code assessments, collaborating with risk, compliance, and infrastructure teams to enforce standards and policies. The role demands deep expertise in SAST/DAST/SCA and secure SDLC, with hands-on dev experience in Java, Python, or .NET.