Senior App Sec Engineer: SSDLC & DevSecOps Lead

Wilson Elser; New York (NY); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

401(k) retirement savings plan

Medical, dental, vision

Disability and life insurance

Competitive salary and benefits

Job summary

Wilson Elser seeks a Senior Application Security Engineer to mature our secure software development and DevSecOps program. The role bridges Information Security and Application Development, embedding security into the SDLC across cloud-native apps, Azure-hosted services, and CI/CD pipelines.

Collaboration with engineering leadership is essential for balanced speed and security. The ideal candidate combines hands-on application security expertise with practical development experience, reporting

Qualifications

• 5+ years in Application Security, DevSecOps, or software engineering.
• Hands-on securing CI/CD pipelines in Azure DevOps.
• Experience with agile development teams.
• Knowledge of OWASP Top 10 and SSDLC.
• Ability to analyze scanner results and prioritize risks.

Responsibilities

• Lead and mature the SSDLC program and secure development lifecycle.
• Embed secure-by-design principles into development workflows.
• Perform application security reviews, threat modeling, and architecture assessments.
• Review source code and assist in remediation of vulnerabilities.
• Establish secure development standards, policies, and templates.
• Build and maintain secure development patterns for common technologies.
• Integrate security tooling within Azure DevOps pipelines and CI/CD.
• Manage SAST/DAST/SCA/API/IaC scanning and automated security testing.
• Develop processes for vulnerability triage, remediation tracking, and reporting.
• Create dashboards and metrics on security posture and remediation SLAs.
• Collaborate with development teams to manage exceptions and governance.

Skills

Application Security

DevSecOps

CI/CD

Threat Modeling

Vulnerability Management

SAST

DAST

OWASP Top 10

PowerShell

Python

.NET

React

Tools

SonarQube

Azure DevOps

PowerShell

Databricks

MongoDB

Power Platform / Power Apps

Snyk

Azure Cloud Services

Containers/Kubernetes

Job description

Wilson Elser seeks a Senior Application Security Engineer to mature our secure software development and DevSecOps program. The role bridges Information Security and Application Development, embedding security into the SDLC across cloud-native apps, Azure-hosted services, and CI/CD pipelines.

Collaboration with engineering leadership is essential for balanced speed and security. The ideal candidate combines hands-on application security expertise with practical development experience, reporting