Senior Application Security Engineer – Flexible/Remote Growth

AgileEngine, LLC.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

Exciting projects

Flextime

Job summary

AgileEngine, LLC. seeks a Senior Application Security Engineer to join our San Francisco team. You will help secure fast-moving software by deploying and tuning SAST/DAST/IAST tools, performing threat modeling, and guiding remediation of high-risk vulnerabilities.

You will collaborate with engineering leaders to embed security into CI/CD, cloud security, and API authentication, ensuring pragmatic risk management while enabling rapid product delivery.

Qualifications

• 4+ years hands-on application security in a modern software-development environment.
• Strong experience deploying, tuning, and interpreting SAST/DAST; IAST a plus.
• Demonstrated threat modeling and translating findings into practical security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize remediation of high-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors.
• Collaborate with stakeholders to establish metrics demonstrating security proficiency across teams.
• Steer development of tools to improve security through automation and other means.
• Document, maintain, and archive processes associated with key systems.

Skills

Application security

Security governance

Security communication

Tools

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

Job description

AgileEngine, LLC. seeks a Senior Application Security Engineer to join our San Francisco team. You will help secure fast-moving software by deploying and tuning SAST/DAST/IAST tools, performing threat modeling, and guiding remediation of high-risk vulnerabilities.

You will collaborate with engineering leaders to embed security into CI/CD, cloud security, and API authentication, ensuring pragmatic risk management while enabling rapid product delivery.