Senior Application Security Engineer (DevSecOps)

Ascensus; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to lead the application security program and act as a trusted advisor to scrum teams. You will drive best practices for secure development, protect confidential data, and embed security into the SDLC across Ascensus’ web and API platforms.

In this role you will perform architecture analysis, threat modeling, and security testing within a DevSecOps framework, collaborating with security leadership and engineering teams to meet organizational

Qualifications

• Minimum 7 years in Secure Software Development and/or DevSecOps.
• Ability to define software security and privacy requirements.
• Experience with threat modeling and risk mitigation.

Responsibilities

• Protect confidential data and ensure proper handling to prevent unauthorized access.
• Provide security consultation to scrum teams and owners on secure SDLC practices.
• Develop an agile DevSecOps approach supporting all SDLC phases and risk management.
• Integrate security testing into CI/CD pipelines (SAST/DAST/SCA).
• Mentor engineers on vulnerability remediation and secure coding practices.

Skills

DevSecOps

Threat modeling

CI/CD security

SAST/DAST

Familiar with OWASP

Metasploit

Nessus/Qualys

Burp Suite

Security architecture

Education

Bachelor's degree in CS/Engineering

Security certification (CISSP/CISA/SSCP)

Tools

Burp Suite

Fiddler

Zap (OWASP ZAP)

Wireshark

Metasploit

Nessus

Qualys

Job description

Ascensus is seeking an Application Security Engineer to lead the application security program and act as a trusted advisor to scrum teams. You will drive best practices for secure development, protect confidential data, and embed security into the SDLC across Ascensus’ web and API platforms.

In this role you will perform architecture analysis, threat modeling, and security testing within a DevSecOps framework, collaborating with security leadership and engineering teams to meet organizational