Senior Application Security Engineer ID87004

AgileEngine, LLC.; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

Flextime

Job summary

AgileEngine, LLC. in Boston, MA is seeking a Senior Application Security Engineer to drive secure development for Fortune 500 clients and innovative startups. You will join a team that treats security as a core enabler of fast software delivery.

You will deploy and tune SAST/DAST/IAST, perform threat modeling, and integrate security into CI/CD with automation. Excellent communication helps you influence engineers and reduce risk across projects.

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment (4+ years).
• Deep experience deploying, tuning, and interpreting SAST/DAST; IAST a plus.
• Experience conducting threat modeling and translating findings into security requirements.
• Experience integrating security testing into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web vulnerabilities.
• Experience with infrastructure-as-code and automation tools (Terraform, CloudFormation, Ansible, Puppet, Chef, Salt).
• Ability to prioritize real security risk and drive timely remediation.
• Strong communication and collaboration across engineering teams.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize remediation of the highest-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors in the technology stack.
• Collaborate with stakeholders to establish metrics showing application security proficiency across teams.
• Steer tooling development to improve security through automation and faster gains.
• Ensure processes for key systems are documented, maintained, and archived.

Skills

Application Security

Threat Modeling

CI/CD security

SAST/DAST/IAST

AWS security

IaC automation

Security tooling

Communication

Tools

Nessus

Burp Suite

WAF

Terraform

Puppet

Chef

Salt

CloudFormation

Job description

Senior Application Security Engineer ID87004

Full time | AgileEngine | United States

Posted On 09/15/2026

Job Information

City Boston

State/Province Massachusetts

31626

IT Services

Job Description

AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards.

WHY JOIN US

If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!

ABOUT THE ROLE

WHAT YOU WILL DO

• Be a part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products.


• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.


• Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities.


• Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.


• Collaborate with technology stakeholders to establish metrics that demonstrate application security proficiency across all engineering teams.


• Steer the development of tools to improve the security of applications through automation and other means, allowing for faster and easier security gains by teams.


• Ensure processes associated with key systems are documented, maintained, and archived.

MUST HAVES

• You must be authorized to work for ANY employer in the US (e.g., Green card holders, TN visa holders, GC EAD, H4 EAD, U4U with EAD), as we are unable to sponsor or take over employment visa sponsorship at this time;


• Strong hands‑on Application Security experience in a modern software-development environment of at least 4 years.


• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus.


• Demonstrated experience conducting threat modeling and translating findings into practical security requirements.


• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.


• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities.


• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.


• Ability to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities.


• Strong communication and influence skills: able to explain complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders.


• Collaborative, solutions-oriented approach; must be able to build trust with development teams and improve security without unnecessarily slowing product delivery.

NICE TO HAVES

• Familiarity with security tools such as Nessus, Burp, and web application firewalls.


• Experience with Static/Dynamic Application Security Testing methodologies and tools.


• Experience with automation tools such as Terraform, Puppet, Chef, Salt, Ansible, or CloudFormation.


• Experience conducting a detailed threat model exercise.


• Experience with CI/CD pipelines and how to assess them from a security perspective, including the integration of security tools with the pipeline.


• Experience working with cloud-based infrastructure and technologies, preferably AWS.


• A collaborator who will partner across the engineering organization to drive the establishment of a security posture.


• Results oriented and believes in steady continuous improvement.


• Curious and always goes beyond what is happening to discover why.


• An effective communicator with a solution-oriented mindset.


• A strategic thinker who focuses on integrating current initiatives and ideating on ways to improve while still meeting the needs of the business.

PERKS AND BENEFITS

• Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps.


• Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities.


• A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands.


• Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive.