Senior App Security Engineer — AI & Secure SDLC Lead

Clear Capital | CubiCasa | restb.ai; United States; Remote; USD 111,000 - 144,000; Full time

Benefits offered by this job

Profit-sharing bonus program

Communication stipends

Referral bonuses

Job summary

Clear Capital is seeking a Sr. Application Security Engineer to validate high security throughout applications and services, including databases and middle-tier systems. You will address legacy and emerging issues and implement repeatable secure development practices to reduce exploitable design flaws.

This role emphasizes threat modeling, vulnerability remediation, and collaboration with architects and developers to secure design from the start, including AI security initiatives.

Qualifications

• 4+ years of related experience required.
• Bachelor’s Degree, ideally in Computer Science, IT, Software Engineering, or equivalent.
• Strong technical and analytical background with software development and scripting experience (e.g., Java, Python, C++, Ruby, JavaScript, PowerShell, PHP).
• Expertise in application security testing (SAST/DAST/SCA).
• Proficiency in threat modeling, vulnerability/penetration testing, API security, OWASP Top Ten, and AWS/private cloud security.

Responsibilities

• Plan and carry out application security testing across the SDLC to identify vulnerabilities and secure coding weaknesses.
• Assess vulnerabilities and propose risk-mitigating solutions using automation to improve testing and remediation.
• Communicate findings, risks, and progress to stakeholders with SLAs and business metrics.
• Lead AI security initiatives, including threat modeling for AI stacks and auditing third-party models/APIs.

Skills

Scripting languages

Software development

Attack thinking

Education

Bachelor’s degree

Tools

SAST

DAST

SCA

Job description

Clear Capital is seeking a Sr. Application Security Engineer to validate high security throughout applications and services, including databases and middle-tier systems. You will address legacy and emerging issues and implement repeatable secure development practices to reduce exploitable design flaws.

This role emphasizes threat modeling, vulnerability remediation, and collaboration with architects and developers to secure design from the start, including AI security initiatives.