Senior Application Security Engineer - Hybrid

MANIFEST Technology; New York (NY); Hybrid; USD 103,000 - 165,000; Part time

Benefits offered by this job

Health coverage

Job summary

MANIFEST Technology is seeking an experienced Application Security Engineer to join our team in partnership with our client in the Capital District, NY. You will strengthen application security across a large-scale, multi-tier environment by collaborating with development teams, assessing risk, and driving timely remediation of findings.

The role includes secure development guidance, AI-assisted analysis, and CI/CD security integrations, with a hybrid work plan after an onsite start.

Qualifications

• Bachelor’s degree in Computer Science or a related technical field.
• 8+ years of Information Technology experience.
• 5+ years in a software development role as a Developer or Architect.
• 3+ years of Application Security Engineering experience conducting assessments and penetration testing.

Responsibilities

• Join the Development Team supporting a multi-tier architecture and Java-based web apps.
• Remediate vulnerabilities and ensure security checkpoints across the SDLC.
• Perform risk-based assessments and penetration testing using dynamic/static/manual techniques.
• Review code commits, designs, and architecture changes for vulnerabilities and compliance risks.
• Integrate AI-driven code analysis platforms into CI/CD pipelines to flag insecure patterns.

Skills

Java

Secure coding

Risk assessment

CI/CD security

Education

Bachelor’s degree in Computer Science

Tools

Fortify

SonarQube

RHEL/JBoss

Job description

MANIFEST Technology is seeking an experienced Application Security Engineer to join our team in partnership with our client in the Capital District, NY. You will strengthen application security across a large-scale, multi-tier environment by collaborating with development teams, assessing risk, and driving timely remediation of findings.

The role includes secure development guidance, AI-assisted analysis, and CI/CD security integrations, with a hybrid work plan after an onsite start.