Senior Application & Cloud Security Engineer

REPAY Company; Atlanta, Northern (GA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

REPAY is seeking an experienced Application Security Engineer to lead product security across applications and cloud environments. You will review new features, conduct threat modeling, and define secure design patterns aligned to OWASP, NIST, CIS, and PCI DSS.

You will own SAST/DAST/SCA tooling, tune WAFs, and drive secure coding enablement while integrating security into CI/CD pipelines. Expertise in Terraform IaC, container security, and AI security is a plus.

Qualifications

• Bachelor's degree in computer science, information systems, or related field, or equivalent practical experience.
• 5+ years of experience in application security, cloud security, product security, or security-focused software engineering.
• Experience with secure design reviews and threat modeling for modern applications and cloud architectures.
• Fluency with OWASP ASVS/Top 10, OWASP SAMM, NIST SSDF, CIS Benchmarks, PCI DSS and cloud security best practices.
• Hands-on experience with SAST, DAST, SCA, and WAF technologies, including CI/CD integration.
• Experience with CSPM tooling and securing AWS/Azure environments (IAM, networking, logging, data services).
• Experience securing Terraform IaC, containerized workloads (Docker/Kubernetes), and guardrails via policy as code.
• Proficiency in at least one programming language (Python/Go/Java/TypeScript) for automation and code review.

Responsibilities

• Review new applications and infrastructure to identify security requirements and design flaws.
• Conduct threat modeling and secure design reviews early in the development lifecycle.
• Define and maintain application and cloud security standards mapped to OWASP, NIST, CIS, and PCI DSS.
• Own and optimize SAST/DAST/SCA tools and CI/CD integration; manage WAF policy design and tuning.
• Triage findings, drive root-cause remediation with engineering teams, and support secure coding enablement.
• Improve cloud security posture with CSPM and secure IaC patterns; embed security controls into pipelines.

Skills

Threat modeling

Secure design reviews

Security frameworks

CI/CD security integration

Security enablement

Communication with engineers

AI security awareness

Education

Bachelor's degree in CS/IS or related field

Tools

SAST

DAST

SCA

WAF

Terraform

CI/CD pipelines

IAM & Networking

Kubernetes / Docker

Policy as code

Job description

REPAY is seeking an experienced Application Security Engineer to lead product security across applications and cloud environments. You will review new features, conduct threat modeling, and define secure design patterns aligned to OWASP, NIST, CIS, and PCI DSS.

You will own SAST/DAST/SCA tooling, tune WAFs, and drive secure coding enablement while integrating security into CI/CD pipelines. Expertise in Terraform IaC, container security, and AI security is a plus.