Senior Application Security Engineer

Arkhya Tech Inc.; Charlotte (NC); On-site; USD 140,000 - 210,000; Full time

Job summary

Arkhya Tech Inc. is seeking an accomplished Application Security professional to champion security practices across development teams and drive a security-first culture in a dynamic environment.

You will lead security reviews, threat modeling, and code assessments, collaborating with risk, compliance, and infrastructure teams to enforce standards and policies. The role demands deep expertise in SAST/DAST/SCA and secure SDLC, with hands-on dev experience in Java, Python, or .NET.

Qualifications

• 12+ years of experience in application security, development, or related cybersecurity roles.
• Deep expertise in SAST, DAST, SCA, vulnerability management, and secure SDLC.
• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).
• Hands-on experience with application development (Java, Python, .NET, or similar).
• Experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.
• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.

Responsibilities

• Champion application security best practices across development teams and Lines of Business (LOBs).
• Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.
• Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.
• Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.
• Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.
• Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

Skills

App security

Threat modeling

Vulnerability management

Secure SDLC

Cloud security

Tools

SAST

DAST

SCA

CI/CD security

Job description

Must have : App Security, App Development, Risk, Vulnerability

Job Description:

Key Responsibilities

• Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.
• Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.
• Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.
• Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.
• Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.
• Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

Required Qualifications

• 12+ years of experience in application security, application development, or related cybersecurity roles.
• Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.
• Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).
• Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.
• Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.
• Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.