Senior App Security Engineer - DevSecOps & SDLC Pro

Jobtailor; Illinois; On-site; USD 140,000 - 180,000; Full time

Job summary

Jobtailor in Illinois seeks an experienced Application Security professional to secure web and eCommerce apps, partner with software teams, and drive security within the SDLC. You will mentor developers on secure-by-design practices and oversee secure coding, SAST/DAST, and governance.

You will also integrate security into CI/CD pipelines, communicate risks to stakeholders, and collaborate with engineering to deliver secure software at scale.

Qualifications

• Must have strong Application Security experience and hands-on expertise.
• Deep understanding of the full SDLC including requirements, architecture, development, testing, deployment, and maintenance.
• Experience integrating security into software development and CI/CD pipelines.

Responsibilities

• Secure high-visibility web and eCommerce applications.
• Partner with software engineering teams throughout the SDLC.
• Drive Application Security and DevSecOps best practices.
• Integrate security across the SDLC.
• Identify, prioritize, and remediate vulnerabilities.
• Perform and support SAST and DAST testing.
• Review code and recommend security improvements.
• Promote secure coding, governance, and DevSecOps.
• Communicate risks to stakeholders and mentor teams on secure development.

Skills

Application Security

DevSecOps

SAST

DAST

CI/CD Integration

Vulnerability Management

Secure Coding

SDLC Understanding

Security Governance

Security Risk Communication

Education

Bachelor's degree (Information Security) +8 years

Master's degree (Information Security) +6 years

Tools

GitHub

Source Control Tools

Job description

Jobtailor in Illinois seeks an experienced Application Security professional to secure web and eCommerce apps, partner with software teams, and drive security within the SDLC. You will mentor developers on secure-by-design practices and oversee secure coding, SAST/DAST, and governance.

You will also integrate security into CI/CD pipelines, communicate risks to stakeholders, and collaborate with engineering to deliver secure software at scale.