Senior Application Security Engineer — DevSecOps & Cloud

Inmar Inc.; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) retirement plans

Flexible time off

Certification support

Job summary

Inmar, Inc. seeks a Sr. Application Engineer, Cyber Security to design, build, and automate security controls within application architectures, CI/CD pipelines, and software workflows.

You will partner with engineers to remediate vulnerabilities and ensure secure delivery across product lines. The ideal candidate has 10+ years in security engineering, deep knowledge of web/mobile security, cloud security, and security tooling (Burp, Metasploit).

Qualifications

• Bachelor’s degree in a technical field required.
• 10+ years in security engineering with software background.
• Certifications preferred (OSCP, CISSP, GCIH, GXPN, GPEN).
• Strong experience in web and mobile app security; OWASP knowledge.

Responsibilities

• Be the primary security expert for multiple product lines and act as the contact for engineering and security.
• Design and maintain security tools, automation scripts, and scanner rules in CI/CD.
• Collaborate with developers to remediate vulnerabilities and secure architecture.
• Lead threat modeling sessions and prioritize based on risk impact.
• Ensure security controls are implemented and reviewed across the SDLC.

Skills

Security engineering

Web/mobile security

CI/CD security

Code-level remediation

Threat modeling

Education

B.S. in Computer Science or related field

B.A. in related technical field

Tools

Burp

Metasploit

GitHub

Azure DevOps

Job description

Inmar, Inc. seeks a Sr. Application Engineer, Cyber Security to design, build, and automate security controls within application architectures, CI/CD pipelines, and software workflows.

You will partner with engineers to remediate vulnerabilities and ensure secure delivery across product lines. The ideal candidate has 10+ years in security engineering, deep knowledge of web/mobile security, cloud security, and security tooling (Burp, Metasploit).