Senior Application Security Engineer - Cloud, API & CI/CD

Accelerant; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Accelerant is seeking a Senior Application Security Engineer to join the Production Engineering team. You will improve the security of Accelerant's applications, APIs, cloud services, and software delivery practices while collaborating with development squads.

You will own vulnerability management, perform penetration testing, and drive remediation using security automation and AI-assisted triage to reduce Critical and High findings across CI/CD pipelines.

Qualifications

• 5+ years of application security or DevSecOps experience.
• Strong knowledge of OWASP Top 10 and API security.
• Experience with external pentest programs.
• Experience CI/CD security integration.

Responsibilities

• Own and improve application security practices across web apps, APIs, services, and CI/CD pipelines.
• Manage external penetration testing program including planning, scoping, vendor engagement, remediation tracking and retesting.
• Broker relationships between development teams and third-party testing providers to ensure clear expectations and timely closure of findings.
• Prioritize and close Critical and High CVEs and other significant findings.
• Build proactive remediation processes using security AI agents and automation.
• Maintain SAST, DAST, SCA, container, secrets, and vulnerability scanning within development workflows.
• Maintain and improve WAF policies, API security controls, filtering, and rate limiting.
• Support threat modeling, secure design reviews, vulnerability assessments, incident response, and secure coding practices.
• Work with Compliance to gather and maintain evidence for ISO 27001, SOX, and SOC 1/2 requirements.
• Partner with Development, Architecture, Cloud/DevOps, Compliance, and other Security disciplines to embed security into delivery practices.
• Provide clear security guidance, documentation, reporting, and education to technical teams.

Skills

Application security experience

DevSecOps

Security automation

Communication skills

Tools

Snyk

Qualys

Trivy

Dependabot

GitHub Advanced Security

Job description

Accelerant is seeking a Senior Application Security Engineer to join the Production Engineering team. You will improve the security of Accelerant's applications, APIs, cloud services, and software delivery practices while collaborating with development squads.

You will own vulnerability management, perform penetration testing, and drive remediation using security automation and AI-assisted triage to reduce Critical and High findings across CI/CD pipelines.