Senior Application Security Engineer - Flexible Schedule

AgileEngine, LLC.; Blacksburg (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

Exciting projects

Flextime

Job summary

AgileEngine, LLC. in Blacksburg, VA, is seeking a Senior Application Security Engineer to join a bleeding-edge security organization that enables secure, reliable software development.

You will deploy and tune SAST/DAST/IAST, conduct threat modeling, and drive security improvements across CI/CD pipelines and cloud applications, with a strong focus on collaboration with engineering teams.

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment of at least 4 years.

Responsibilities

• Be a part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to ensure remediation of the highest-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause data breaches.
• Collaborate with technology stakeholders to establish metrics that demonstrate application security proficiency across all engineering teams.
• Steer the development of tools to improve security through automation for faster security gains by teams.
• Ensure processes associated with key systems are documented, maintained, and archived.

Skills

Application Security

Threat Modeling

CI/CD Security

Security Testing

AWS Security

Communication

Tools

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

Job description

AgileEngine, LLC. in Blacksburg, VA, is seeking a Senior Application Security Engineer to join a bleeding-edge security organization that enables secure, reliable software development.

You will deploy and tune SAST/DAST/IAST, conduct threat modeling, and drive security improvements across CI/CD pipelines and cloud applications, with a strong focus on collaboration with engineering teams.