Senior App Security Engineer - DevSecOps & Secure SDLC

Ascensus; Dresher (Montgomery County); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Tuition reimbursement

Paid time off

Medical benefits

401(k) match

HSA contributions

Job summary

Ascensus is seeking an experienced Application Security Engineer to own and advance the company’s application security program. You will partner with scrum teams to embed secure development practices and ensure confidentiality, integrity, and availability of web apps and APIs.

This role requires strategic thinking, initiative, and collaboration across Tech leadership. You will act as a trusted advisor, shaping security controls, architecture reviews, and threat modeling while integrating

Qualifications

• Secure software development practices and secure SDLC.
• Ability to define software security and privacy requirements.
• Threat modeling and risk mitigation.
• Experience with CI/CD security integrations.
• Familiarity with common security testing tools.

Responsibilities

• Protect confidential data and ensure secure handling.
• Develop a DevSecOps approach for SDLC across teams.
• Provide security consultation to scrum teams and owners.
• Participate in sprint planning to embed security requirements.
• Conduct app security analysis, architecture reviews, and threat modeling.
• Build and monitor policies for SAST, DAST, and SCA.
• Assist with static and dynamic testing and remediation guidance.
• Other tasks as assigned.

Skills

Secure Software Development

DevSecOps

Threat Modeling

CI/CD

Security Architecture

OWASP Top 10

Tools

SAST

DAST

SCA

Burp Suite

Nessus

Qualys

Kubernetes

Job description

Ascensus is seeking an experienced Application Security Engineer to own and advance the company’s application security program. You will partner with scrum teams to embed secure development practices and ensure confidentiality, integrity, and availability of web apps and APIs.

This role requires strategic thinking, initiative, and collaboration across Tech leadership. You will act as a trusted advisor, shaping security controls, architecture reviews, and threat modeling while integrating