Senior Application Security Engineer - Remote

Liquidity Services, Inc.; United States; Remote; USD 107,000 - 134,000; Full time

Benefits offered by this job

401(k) plan

Paid time off (PTO) and holidays

Paid parental leave

Life and disability insurance

Employee Assistance Program (EAP)

Professional development and tuition33

Job summary

Liquidity Services, Inc. is seeking an Application Security Engineer to establish and enforce security standards across the organization.

You will conduct regular security assessments, identify vulnerabilities, and collaborate with teams to remediate risks, while staying current on threats and countermeasures to protect applications. The role involves secure SDLC governance, software supply chain security, and AI-enabled development security within a remote work environment.

Qualifications

• Minimum 5+ years of experience in application security, secure software development, penetration testing, or DevSecOps security.
• Experience influencing engineering teams and driving remediation efforts across multiple development teams.
• Deep knowledge of AWS, Azure, or GCP, including how to secure their services.
• Knowledge of threat modeling, secure code reviews, and the Secure Software Development Life Cycle (SSDLC).
• Knowledge of version control (Git), containerization (Docker), and automated testing integration.
• Knowledge of pipeline permissions, secrets in builds, branch protection, deployment approvals, artifact integrity, and code signing.
• Experience using AI-assisted development tools to improve productivity while maintaining code quality and security.
• Ability to review, validate, and test AI-generated code.

Responsibilities

• Security Testing: Penetration testing, vulnerability scanning, secure code reviews.
• Threat Modeling: Analyze designs for attack vectors and risks.
• Developer Collaboration: Advise on secure coding standards (OWASP Top 10).
• Tool Automation: Configure WAFs, CI/CD security pipelines, automated scanners.
• Identity & Access Security: Manage SSO, OAuth, MFA, least privilege.
• Secure SDLC Governance: Define secure design reviews and release approvals.
• Software Supply Chain Security: Oversee SBOM, SCA, OSS risk management.
• Security Architecture Reviews: Review cloud architectures for risks, enforce controls.
• AI and Emerging Tech Security: Review AI-generated code and AI workflow security.
• Vulnerability Management: Triage, risk ratings, remediation, retesting.
• Data Protection: PII handling, encryption, data minimization, privacy considerations.
• Payment Security: PCI DSS scope review and vendor AOC security.
• Incident Response: Logging, alerting, post-incident actions.

Skills

Threat modeling

Secure coding

Cloud security (AWS/Azure/GCP)

CI/CD security

AI-assisted development tools

Code review

REST/GraphQL security

SCA/SBOM risk management

Incident response coordination

Tools

Git

Docker

Terraform/CloudFormation

Kubernetes

SAST/DAST/Secrets tools

Job description

Liquidity Services, Inc. is seeking an Application Security Engineer to establish and enforce security standards across the organization.

You will conduct regular security assessments, identify vulnerabilities, and collaborate with teams to remediate risks, while staying current on threats and countermeasures to protect applications. The role involves secure SDLC governance, software supply chain security, and AI-enabled development security within a remote work environment.