Senior App Security Engineer - Secure-by-Default, Remote

Quartermaster AI; Virginia; Teletrabalho; USD 130 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible remote work

Medical, dental, and vision benefits

Resumo da oferta

Quartermaster AI seeks an hands-on Security Engineer, Application Security to own security of cloud services, APIs, data pipelines, and distributed edge deployments. Lead threat models, code reviews, and drive secure-by-default patterns across engineering teams.

You will build tooling for SAST/DAST/CI/CD, coordinate vulnerability remediation, and shape the secure SDLC with autonomy while collaborating with Security Operations and GRC.

Qualificações

• 5–8 years in application security, product security, or software engineering with a security focus.

Responsabilidades

• Lead threat modeling and secure design reviews for new and existing services.
• Perform in-depth secure code reviews and security assessments — whitebox, greybox, and blackbox.
• Build, integrate, and tune application security tooling in CI/CD — SAST, DAST, SCA, secret scanning, and static analysis platforms such as CodeQL.
• Triage, prioritize, and drive remediation of application vulnerabilities with engineering teams.
• Develop automation and paved-road tooling to make the secure path the default for developers.
• Serve as the application security SME for engineers and architects, steering secure-by-default patterns.
• Define and mature the secure SDLC, secure coding standards, and security requirements.
• Own or support the vulnerability disclosure and bug bounty process.
• Strengthen software supply chain security, including dependency management and build/pipeline integrity.
• Partner with security operations on application-layer incidents and remediation.
• Deliver developer-focused security training and champion a security-aware culture.

Conhecimentos

Application security

Threat modeling

Secure code reviews

CI/CD tooling

Communication

Formação académica

Bachelor’s degree in Computer Science, Cybersecurity, or equivalent hands-on experience

Ferramentas

CodeQL

SAST

DAST

SCA

CI/CD tooling

Descrição da oferta de emprego

Quartermaster AI seeks an hands-on Security Engineer, Application Security to own security of cloud services, APIs, data pipelines, and distributed edge deployments. Lead threat models, code reviews, and drive secure-by-default patterns across engineering teams.

You will build tooling for SAST/DAST/CI/CD, coordinate vulnerability remediation, and shape the secure SDLC with autonomy while collaborating with Security Operations and GRC.