Senior Application Security Engineer

High Trail; Arlington (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

High Trail is seeking a highly experienced Application Security Engineer to design, build, and mature application security capabilities across a large-scale engineering organization. The role combines deep expertise in application security, secure software design, risk management, cloud-native architectures, DevSecOps, and security automation.

The ideal candidate will be a hands-on security engineer who can work closely with software developers, architects, DevOps, cloud engineering, data

Qualifications

• Hands-on Application Security experience across large-scale engineering environments.
• Deep expertise in secure design, risk management, and cloud-native architectures.
• Proficient in risk assessment, threat modeling, and vulnerability management per NIST/OWASP.
• Experience implementing automated security controls and tooling in DevSecOps.

Responsibilities

• Design and mature application security capabilities across the organization.
• Collaborate with software developers, DevOps, and cloud teams to reduce risk.
• Develop scalable, automated controls throughout the SDLC.
• Lead secure software design and security testing initiatives.

Skills

Application Security

Cloud Security

Threat Modeling

Risk Assessment

Security Automation

SAST/DAST/SCA

Tools

SAST

DAST

SCA

IaC Security

Container Security

API Security

Job description

We are seeking a highly experienced Application Security Engineer to help design, build, and mature application security capabilities across a large-scale engineering organization. This role will combine deep expertise in application security, secure software design, risk management, cloud-native architectures, DevSecOps, and security automation.

The ideal candidate will be a hands-on security engineer who can work closely with software developers, architects, DevOps, cloud engineering, data science, and cybersecurity teams to identify complex security risks and build scalable, automated controls throughout the software development lifecycle.

Required Qualifications

• Strong professional experience in Application Security, AppSec Engineering, Cloud Security, Software Engineering, or a closely related discipline.
• Deep expertise in application security, secure software design, and technology risk management.
• Strong knowledge of: OWASP ASVS, OWASP Top 10, NIST SP 800-53. Secure SDLC / SSDLC, Threat modeling, Risk assessment and vulnerability management
• Extensive experience conducting complex security assessments across large-scale engineering environments.
• Demonstrated ability to design and implement automated security controls and security tooling.
• Hands-on experience with SAST, DAST, SCA, IaC, container, API, and cloud security technologies.