Senior Application Security Engineer — DevSecOps & SDLC

Globenet Consulting Corp; Bellevue (WA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Advancement opportunities

Training & development

Job summary

The AES Group is hiring a Cybersecurity Engineer IV – Application Security to advance security across the SDLC and partner with software teams. This role emphasizes secure-by-design development, continuous testing (SAST/DAST), and DevSecOps in a fast-paced environment.

Ideal candidates have 8+ years of info security or a Master's with 6+ years, with deep AppSec and CI/CD security expertise. Onsite work is expected at major US locations with flexible options.

Qualifications

• Bachelor's degree plus 8+ years in Information Security, or a Master's with 6+ years of experience.
• Strong Application Security experience is required and hands-on expertise.
• Experience integrating security across the SDLC and CI/CD pipelines.

Responsibilities

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

Skills

Hands-on AppSec

SDLC integration

Secure coding

DevSecOps

SAST

DAST

CI/CD security

GitHub/SCM

Stakeholder comms

Education

Bachelor's degree in Information Security

Master's degree in Information Security

Tools

SAST tools

DAST tools

CI/CD tooling

GitHub

Job description

The AES Group is hiring a Cybersecurity Engineer IV – Application Security to advance security across the SDLC and partner with software teams. This role emphasizes secure-by-design development, continuous testing (SAST/DAST), and DevSecOps in a fast-paced environment.

Ideal candidates have 8+ years of info security or a Master's with 6+ years, with deep AppSec and CI/CD security expertise. Onsite work is expected at major US locations with flexible options.