Senior Application Security Engineer — Remote/Flexible

AgileEngine; Boca Raton (FL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine seeks a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy SAST/DAST/IAST, conduct threat modeling, and integrate security controls into CI/CD pipelines, with proficiency in Python, JavaScript, or Java and AWS.

You will interpret code scanning results, drive remediation of high-risk vulnerabilities, and collaborate with stakeholders to establish security metrics, while advancing automation to accelerate secure

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment of at least 4 years.
• Ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus.
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Ability to prioritize true security risk and drive timely remediation of meaningful vulnerabilities.
• Strong communication and influence skills, to explain complex security issues to engineers and stakeholders.
• Collaborative, solutions-oriented approach to improve security without slowing product delivery.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize remediation of the highest-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors in the tech stack.
• Collaborate with technology stakeholders to establish metrics demonstrating application security proficiency across teams.
• Steer development of tools to improve security through automation and other means.
• Ensure processes associated with key systems are documented, maintained, and archived.

Skills

Application security

Threat modeling

CI/CD security

SAST/DAST/IAST

AWS security

Python/JS/Java

Code reading

Tools

Nessus

Burp Suite

Terraform

CloudFormation

Ansible

Job description

AgileEngine seeks a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy SAST/DAST/IAST, conduct threat modeling, and integrate security controls into CI/CD pipelines, with proficiency in Python, JavaScript, or Java and AWS.

You will interpret code scanning results, drive remediation of high-risk vulnerabilities, and collaborate with stakeholders to establish security metrics, while advancing automation to accelerate secure