Senior App Security Engineer – Secure SDLC & AI Risk

Clear Capital

Reno (NV)

On-site

USD 111,000 - 144,000

Full time

9 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer match

PTO and holidays

Employee assistance program

Wellness programs

Short term disability

Job summary

Clear Capital, a national real estate analytics and valuation technology company, seeks a Sr. Application Security Engineer to ensure secure design and implementation of applications and their dependencies.

You will build repeatable secure development practices, address legacy and emerging security issues, and communicate risks to leadership to enable business continuity with minimized risk. You will lead testing across the software development life cycle, assess and remediate vulnerabilities,

Qualifications

4+ years of related experience.
Bachelor’s Degree, ideally in a technically related field (Computer Science, Information Technology, Software Engineering), or equivalent work experience.
Expertise in application security testing, including hands-on experience with Static (SAST), Dynamic (DAST), and Software Composition Analysis (SCA) tools.
Proficiency in application security assessments, including threat modeling, vulnerability and penetration testing, API security, OWASP Top Ten mitigation, and securing applications in AWS and private cloud environments.
Relevant certifications such as C|ASE, CSSLP, GWAPT, OSCP, or equivalent.
Experience with frameworks such as ISO 27001, NIST, GDPR, CIS, or SOC 2.

Responsibilities

Plan and carry out application security testing in all phases of the software development life cycle to identify vulnerabilities in applications and weaknesses in secure coding practices.
Assess discovered vulnerabilities and recommend risk-mitigating solutions, leveraging automation to improve the efficiency of both testing and remediation processes.
Communicate findings, risks, and recommendations to stakeholders, while documenting delivery and implementation progress against defined service-level agreements (SLAs) and business metrics.
Lead AI security initiatives, including threat modeling production LLM stacks for autonomy and prompt injection risks, and auditing third-party models and APIs to secure the software supply chain.
Attend and participate in product and application projects. This includes interacting with business units and technical teams to understand what is coming and how their projects can be more secure from the beginning.
Collaborate with architects and development teams to drive secure design practices, leveraging established security standards, configurations, and frameworks.
Fully define and follow a security review process to ensure an automated and repeatable process is managed.
Regularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing.
Train developers and junior application security engineers on weaknesses to avoid.
Perform other duties as assigned.