Senior Application Security Engineer | DevSecOps Expert

Ascensus; Dresher (Montgomery County); On-site; USD 120,000 - 160,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to partner with scrum teams and drive secure development practices across our software program. The role emphasizes building and governing secure SDLC processes, performing architecture reviews, and guiding teams on risk and data protection.

You will act as a trusted security advisor, ensuring confidentiality, integrity, and availability of web apps and APIs, while aligning with our security leadership to meet organizational goals.

Qualifications

• Minimum 4 years of secure software development or DevSecOps experience.

Responsibilities

• Protect confidential data and ensure proper handling.
• Advise scrum teams on security controls and secure SDLC.
• Participate in sprint planning to embed security requirements.
• Conduct application security analyses, architecture reviews, threat modeling.
• Develop and monitor compliance with security policies and standards.
• Support SAST, DAST, and SCA in CI/CD pipelines.
• Triage findings and provide remediation guidance.
• Assist with additional tasks and projects.

Skills

Threat modeling

CI/CD integration

SAST/DAST

Security testing tools

Vulnerability mgmt

Cloud security

Tools

Burp Suite

Fiddler

ZAP

Wireshark

Metasploit

Job description

Ascensus is seeking an Application Security Engineer to partner with scrum teams and drive secure development practices across our software program. The role emphasizes building and governing secure SDLC processes, performing architecture reviews, and guiding teams on risk and data protection.

You will act as a trusted security advisor, ensuring confidentiality, integrity, and availability of web apps and APIs, while aligning with our security leadership to meet organizational goals.