Senior Application Security Engineer – Flexible Hours

AgileEngine; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

Exciting projects

Flextime

Job summary

AgileEngine, a leading software company, is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. This role deploys SAST, DAST, and IAST, performs threat modeling, and integrates security controls into CI/CD pipelines.

You will work across Python, JavaScript, or Java and AWS-based infrastructures, collaborating with stakeholders to reduce risk while keeping product velocity high. Excellent communication is essential.

Qualifications

• 4+ years of hands-on application security in a modern software environment.
• Ability to read Python, JavaScript, or Java code.
• Experience deploying, tuning, and interpreting SAST/DAST/IAST and interpreting results.
• Threat modeling experience and translating findings into security requirements.
• Experience integrating security into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud security, APIs, auth, secrets management, and common web app vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.

Responsibilities

• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize high-risk vulnerabilities for remediation.
• Perform threat modeling to identify potential attack vectors in the tech stack.
• Collaborate with stakeholders to establish metrics demonstrating application security proficiency.
• Steer development of tools to automate security gains and speed remediation.
• Document and maintain security processes for key systems.

Skills

Application Security

SAST/DAST/IAST

Threat modeling

CI/CD security

AWS security

Code reading

English communication

Security tooling

Tools

Nessus

Burp Suite

WAFs

Terraform

CloudFormation

Puppet

Chef

Ansible

Salt

Job description

AgileEngine, a leading software company, is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. This role deploys SAST, DAST, and IAST, performs threat modeling, and integrates security controls into CI/CD pipelines.

You will work across Python, JavaScript, or Java and AWS-based infrastructures, collaborating with stakeholders to reduce risk while keeping product velocity high. Excellent communication is essential.