Senior Application Security Engineer — Remote

Liquidity Services; United States; Remote; USD 107,000 - 134,000; Full time

Benefits offered by this job

Annual bonus

Job summary

Liquidity Services is seeking an Application Security Engineer to establish and enforce security standards across the organization. You will conduct regular assessments, identify vulnerabilities, and work with internal and external teams to remediate them.

You will lead security testing, threat modeling, secure coding guidance, and CI/CD security tooling. Responsibilities include managing WAFs, API security, SBOM review, and secure design reviews to minimize risk.

Qualifications

• Minimum 5+ years in application security, secure software development, or DevSecOps.
• Experience influencing engineering teams and remediation across multiple projects.
• Deep knowledge of AWS, Azure, or GCP security configurations.
• Solid understanding of DNS, HTTP, TLS, cookies, and browser security controls.
• Familiarity with SSDLC, threat modeling, and secure code reviews.
• Experience with CI/CD, Git, Docker, and automation of security checks.

Responsibilities

• Perform penetration testing, vulnerability scanning, and secure code reviews.
• Model threats and identify risks before deployment.
• Advise on secure coding standards (OWASP Top 10) with engineering teams.
• Configure and manage WAFs, CI/CD security pipelines, and automated scanners.
• Manage IAM, SSO, OAuth, MFA, and least-privilege access.
• Oversee SCA, SBOM generation and third-party component security reviews.
• Review architectures for security risks and define compensating controls.
• Promote secure AI coding practices and review AI-generated code.
• Lead vulnerability triage, remediation deadlines, and retesting.
• Support data privacy by design and PCI DSS considerations.

Skills

Threat modeling

Secure coding

DevSecOps

Cloud security

Automation

Job description

Liquidity Services is seeking an Application Security Engineer to establish and enforce security standards across the organization. You will conduct regular assessments, identify vulnerabilities, and work with internal and external teams to remediate them.

You will lead security testing, threat modeling, secure coding guidance, and CI/CD security tooling. Responsibilities include managing WAFs, API security, SBOM review, and secure design reviews to minimize risk.