Senior Application Security Engineer - Remote

Bright Vision Technologies; Monroe Township (NJ); A distancia; USD 100.000 - 160.000; Jornada completa

Descripción de la vacante

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle in a fully remote US-based role. You will partner with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

This hands-on role blends offensive and defensive security with strong communication, requires deep technical expertise, and a track record of shipping security improvements in production.

Formación

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 10+ years of application security or security engineering experience.
• Strong understanding of OWASP Top 10 and modern exploit patterns.
• Hands-on code review across at least two major languages.
• Familiar with CI/CD security tooling (SAST/DAST/SCA).
• Experience with cloud security and infrastructure controls.
• Strong communication with technical and non-technical audiences.
• Proficiency in at least one programming language for tooling.
• Experience in Agile development environments.

Responsabilidades

• Conduct threat modeling and security architecture reviews for new and existing applications and services.
• Perform manual code reviews, secure design consultations, and pair with engineering teams on hardening critical components.
• Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines.
• Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking.
• Build paved-road libraries and frameworks that make secure patterns the default for engineering teams.
• Lead red-team and purple-team exercises against internal applications and drive remediation of identified weaknesses.
• Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms.
• Design and enforce secure authentication, authorization, session management, and cryptographic patterns.
• Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments.
• Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff.
• Respond to security incidents involving application vulnerabilities or active exploitation.
• Track and apply emerging threats and CVEs that may affect the application portfolio.
• Maintain comprehensive, current technical documentation — architecture diagrams, runbooks, and operational procedures.

Conocimientos

OWASP Top 10

Code review

CI/CD security

Cloud security

Communication skills

Automation programming

Agile experience

Incident response

Educación

Bachelors in CS/Cybersecurity

Herramientas

SAST tooling

DAST tooling

SCA tooling

CI/CD tooling

Descripción del empleo

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle in a fully remote US-based role. You will partner with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio.

This hands-on role blends offensive and defensive security with strong communication, requires deep technical expertise, and a track record of shipping security improvements in production.