Senior Application Security Engineer — DevSecOps & SDLC

Globenet Consulting Corp; Bellevue (WA); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Advancement opportunities

Training & development

Descripción de la vacante

The AES Group is hiring a Cybersecurity Engineer IV – Application Security to advance security across the SDLC and partner with software teams. This role emphasizes secure-by-design development, continuous testing (SAST/DAST), and DevSecOps in a fast-paced environment.

Ideal candidates have 8+ years of info security or a Master's with 6+ years, with deep AppSec and CI/CD security expertise. Onsite work is expected at major US locations with flexible options.

Formación

• Bachelor's degree plus 8+ years in Information Security, or a Master's with 6+ years of experience.
• Strong Application Security experience is required and hands-on expertise.
• Experience integrating security across the SDLC and CI/CD pipelines.

Responsabilidades

• Integrate security across the SDLC.
• Partner with developers to implement secure-by-design practices.
• Identify, prioritize, and remediate application vulnerabilities.
• Perform and support SAST and DAST testing.
• Review application code and recommend security improvements.
• Promote secure coding, governance, and DevSecOps.
• Integrate security into CI/CD pipelines.
• Communicate security risks to technical and business stakeholders.
• Mentor development teams on secure software development.

Conocimientos

Hands-on AppSec

SDLC integration

Secure coding

DevSecOps

SAST

DAST

CI/CD security

GitHub/SCM

Stakeholder comms

Educación

Bachelor's degree in Information Security

Master's degree in Information Security

Herramientas

SAST tools

DAST tools

CI/CD tooling

GitHub

Descripción del empleo

The AES Group is hiring a Cybersecurity Engineer IV – Application Security to advance security across the SDLC and partner with software teams. This role emphasizes secure-by-design development, continuous testing (SAST/DAST), and DevSecOps in a fast-paced environment.

Ideal candidates have 8+ years of info security or a Master's with 6+ years, with deep AppSec and CI/CD security expertise. Onsite work is expected at major US locations with flexible options.