Senior Application Security Engineer – Cloud Security

Talener; Mount Laurel Township (NJ); Hybrid; USD 110,000 - 124,000; Full time

Job summary

Talener is seeking a Lead Application & Cloud Security Engineer for a 3‑month contract (40 hours/week). Hybrid in Chicago, IL or Southern NJ; 100% remote may be considered for the right candidate.

Requirements: 12+ years in cybersecurity with app/cloud security ownership; hands-on web app pen-testing, threat modeling, code review, and DevSecOps. AWS/Azure security, CISSP or equivalent; OSCP/GWAPT/GPEN valued; audit readiness for PCI DSS, NIST 800-53, ISO 27001.

Qualifications

• 12+ years in cybersecurity with ownership of application and cloud security.
• Hands-on web app penetration testing, threat modeling, code review, and DevSecOps integrations.
• Direct experience securing AWS and Azure.
• CISSP or equivalent senior credential required; OSCP/GWAPT/GPEN valued.
• Experience with audits against PCI DSS, NIST 800-53, ISO 27001 or equivalent.
• Strong communication to convey risks to developers and leadership.

Skills

Web app security

Threat modeling

Code review

DevSecOps

Job description

Our client is a national consumer warranty and utility support enterprise serving millions of households across North America. The organization manages high-volume customer accounts through major utility and municipal partnerships, backed by a modern cloud infrastructure. To support ongoing service delivery and strict data privacy standards, the technology division is strengthening its core application security and infrastructure defenses. The team is seeking a LEAD Application & Cloud Engineer to join their growing team on a contracting bases.

Title: Lead Application & Cloud Security Engineer

Location: Hybrid (Chicago, IL area or Southern NJ area preferred) | 100% Remote considered for the right candidate

Duration: 3-Month Contract (40 hours/week) | Extension potential

Pay Rate: $80.00 – $90.00/hr. W2

Qualifications

• Experience: 12+ years of professional cybersecurity experience, with sustained ownership of application and cloud security domains.
• Technical Proficiency: Hands-on experience with web application penetration testing, threat modeling, code review, and DevSecOps integrations.
• Direct experience configuring and securing public cloud platforms (AWS and Azure).
• Certifications: CISSP or equivalent senior credential required; offensive or AppSec certifications (OSCP, GWAPT, GPEN) are highly valued.
• Compliance Background: Practical experience preparing technical environments for audits against PCI DSS, NIST 800-53, ISO 27001, or equivalent frameworks.
• Collaboration: Strong verbal and written communication skills with the ability to convey technical risks clearly to developers, system administrators, and executive leadership.