Senior Application Security Engineer | Flexible/Remote

AgileEngine; Irving (IA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

Exciting projects

Flextime

Job summary

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy and tune SAST, DAST, and IAST tools, conduct threat modeling, and integrate security controls into CI/CD pipelines.

Proficiency in Python, JavaScript, or Java and AWS is essential. You will collaborate with engineers to prioritize risk, drive remediation for high-priority vulnerabilities, and advance security automation across projects.

Qualifications

• Authorized to work for any employer in the US (no sponsorship).
• Strong hands-on Application Security experience in a modern software-development environment (≥4 years).
• Ability to read, understand, and discuss code in Python, JavaScript, or Java.
• Deep experience deploying, tuning, and interpreting SAST/DAST; IAST experience is a plus.
• Experience conducting threat modeling and translating findings into security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud security, APIs, authentication/authorization, secrets management, and common web vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Ability to prioritize true security risk, reduce scanner noise, and drive remediation.
• Strong communication and influence skills; collaborative approach to improving security without slowing product delivery.
• Upper-intermediate English level.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure, reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results and drive remediation of the highest-risk vulnerabilities.
• Perform threat modeling to identify potential threat vectors across the stack.
• Collaborate with stakeholders to establish metrics demonstrating security proficiency.
• Steer development of tools to improve security through automation and easier remediation.
• Ensure processes around key systems are documented, maintained, and archived.

Skills

Application Security

Threat Modeling

CI/CD Security

AWS Security

SAST/DAST/IAST

Python/JS/Java

Communication Skills

Tools

Nessus

Burp Suite

WAFs

Terraform

CloudFormation

Job description

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy and tune SAST, DAST, and IAST tools, conduct threat modeling, and integrate security controls into CI/CD pipelines.

Proficiency in Python, JavaScript, or Java and AWS is essential. You will collaborate with engineers to prioritize risk, drive remediation for high-priority vulnerabilities, and advance security automation across projects.