Senior Application Security Engineer - Remote & Flexible

AgileEngine, LLC.; New York (NY); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine, a leading IT services firm in New York, is seeking a Senior Application Security Engineer to join our security organization. You will help enable secure and reliable applications across our product teams.

The role focuses on deploying and tuning SAST/DAST/IAST, conducting threat modeling, integrating security into CI/CD, and communicating risks to engineers and leadership. Candidates must be authorized to work in the US and bring hands-on security experience.

Qualifications

• Strong hands-on application security experience in a modern software-development environment.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST is a plus.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud security, APIs, authentication/authorization, secrets management, and common web vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Ability to prioritize true security risk and drive timely remediation of meaningful vulnerabilities.
• Strong communication and influence skills to explain security issues to engineers and stakeholders.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications.
• Deploy and tune SAST, DAST, and IAST.
• Interpret code scanning results to focus remediation on highest-risk vulnerabilities.
• Perform threat modeling to identify attack vectors in the technology stack.
• Collaborate with stakeholders to establish metrics demonstrating application security proficiency.
• Steer development of tools to improve security through automation for faster gains.
• Document, maintain, and archive processes around key systems.

Skills

Application Security

Threat Modeling

CI/CD Security

AWS Security

Security Automation

Communication

Collaboration

Tools

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

SAST

DAST

IAST

Nessus

Burp Suite

Job description

AgileEngine, a leading IT services firm in New York, is seeking a Senior Application Security Engineer to join our security organization. You will help enable secure and reliable applications across our product teams.

The role focuses on deploying and tuning SAST/DAST/IAST, conducting threat modeling, integrating security into CI/CD, and communicating risks to engineers and leadership. Candidates must be authorized to work in the US and bring hands-on security experience.