Senior Application Security Engineer - Remote

Bright Vision Technologies; United States; À distance; USD 100 000 - 160 000; Plein temps

Résumé du poste

Bright Vision Technologies is seeking an Application Security Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across the application portfolio.

The role blends hands-on offensive and defensive security with strong collaboration to help development teams ship secure software efficiently.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 10+ years of application security or security engineering experience.
• Strong understanding of OWASP Top 10, vulnerability classes, and modern exploit patterns.
• Hands-on experience performing code review across at least two major languages.
• Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling.
• Strong understanding of authentication, authorization, and cryptographic primitives.
• Experience with cloud security and modern infrastructure controls.
• Strong communication skills with technical and non-technical audiences.
• Proficiency in at least one programming language for tooling and automation.
• Experience working closely with engineering teams in an Agile environment.

Responsabilités

• Conduct threat modeling and security architecture reviews for apps and services.
• Perform manual code reviews and secure design consultations with engineering teams.
• Operate SAST, DAST, IAST, SCA, and secret scanning in CI/CD pipelines.
• Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking.
• Build paved-road libraries and frameworks that make secure patterns the default for engineering teams.
• Lead red-team and purple-team exercises against internal applications and drive remediation of weaknesses.
• Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms.
• Design and enforce secure authentication, authorization, session management, and cryptographic patterns.
• Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments.
• Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff.
• Respond to security incidents involving application vulnerabilities or active exploitation.
• Track emerging threats and CVEs that may affect the application portfolio.
• Maintain comprehensive, current technical documentation including architecture diagrams, runbooks, and configurations.
• Stay current with application security research and emerging defensive tooling.

Connaissances

OWASP Top 10 knowledge

Code review

Strong communication

Programming for tooling

Agile experience

Security in SDLC

Formation

Bachelor's degree in Computer Science or Cybersecurity

Outils

SAST

DAST

SCA

CI/CD security tooling

Cloud security controls

Description du poste

Bright Vision Technologies is seeking an Application Security Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across the application portfolio.

The role blends hands-on offensive and defensive security with strong collaboration to help development teams ship secure software efficiently.