Senior Application Security Engineer — Remote

World Wide Technology, Inc.; Northern (KY); Hybrid; USD 116,000 - 145,000; Full time

Benefits offered by this job

Health and Wellbeing

401k with Company Matching

Paid Time Off

Parental Leave

Flexible Spending Accounts

Job summary

World Wide Technology is hiring a Senior Application Security Engineer to secure our application ecosystem and reduce risk across software. You will lead vulnerability management, tooling, and secure SDLC practices in containerized, hybrid-cloud environments.

You will partner with engineering, DevOps, and risk teams to deliver secure code at speed, perform threat modeling and secure code reviews, and drive remediation across critical applications.

Qualifications

• Bachelor's degree or equivalent hands-on experience.
• 8+ years in AppSec, information security, software engineering, or SecDevOps.
• Experience with CI/CD security tooling and secure DevOps practices.
• Strong knowledge of OWASP ASVS, Top 10, and API security.
• Excellent communication with engineers and stakeholders.

Responsibilities

• Own vulnerability lifecycle and risk prioritization.
• Maintain and integrate security tooling across the SDLC.
• Perform secure code review, threat modeling, and design reviews.
• Conduct penetration testing and remediation verification.
• Address AI/LLM security considerations and governance.

Skills

8+ years in AppSec / SecDevOps

Security engineering

Education

Bachelor’s degree in Computer Science, Software Engineering, Information Security, or related field

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

SAST

SCA

DAST

Docker

Kubernetes

Job description

World Wide Technology is hiring a Senior Application Security Engineer to secure our application ecosystem and reduce risk across software. You will lead vulnerability management, tooling, and secure SDLC practices in containerized, hybrid-cloud environments.

You will partner with engineering, DevOps, and risk teams to deliver secure code at speed, perform threat modeling and secure code reviews, and drive remediation across critical applications.