Senior Application Security Engineer - DevSecOps Champion

Ascensus; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Ascensus seeks an Application Security Engineer to lead the security program across our web and API platforms. You will collaborate with scrum teams to embed secure development practices, perform threat modeling, and guide remediation with strong data protection focus.

You will integrate SAST/DAST and security tooling into CI/CD, counsel developers, and help shape the security strategy aligned with compliance requirements. Equal opportunity employer.

Qualifications

• Minimum 4 years in Secure Software Development and/or DevSecOps.
• Ability to define software security and privacy requirements.
• Solid understanding of threat modeling, risk, and mitigation.

Responsibilities

• Protect confidential data and ensure proper handling.
• Provide security consultation to scrum teams and tech groups.
• Develop agile DevSecOps approach across SDLC and identify risks.
• Support SAST/DAST/SCA tools and remediation guidance.
• Embed security requirements into sprint planning and architecture reviews.
• Mentor teams on secure development practices.

Skills

Secure SDLC

Threat modeling

CI/CD security

SAST/DAST

OWASP Top 10

Vulnerability management

API security

Cloud security

Security automation

Secure coding

Tools

Burp Suite

Fiddler

Zap

Wireshark

Metasploit

Nessus

Qualys

Job description

Ascensus seeks an Application Security Engineer to lead the security program across our web and API platforms. You will collaborate with scrum teams to embed secure development practices, perform threat modeling, and guide remediation with strong data protection focus.

You will integrate SAST/DAST and security tooling into CI/CD, counsel developers, and help shape the security strategy aligned with compliance requirements. Equal opportunity employer.