Senior Application Security Engineer — Remote & SDLC Champion

Liquidity Services Inc.; Oregon; Hybrid; USD 107,000 - 134,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

PTO & holidays

Parental leave

Life and disability insurance

Employee Assistance Program (EAP)

Professional development and tuition

Tuition assistance

Job summary

Liquidity Services Inc. is seeking an Application Security Engineer to establish and enforce security standards across the organization. You will conduct regular assessments, identify vulnerabilities, and drive remediation with engineering teams.

You will stay current on threats, govern secure SDLC, and oversee AI security, API security, and cloud platform protections for our applications. You will lead vulnerability triage, implement secure design patterns, and ensure data protection and PCI

Qualifications

• Minimum 5+ years in application security, secure SDLC, or DevSecOps.
• Proven ability to influence engineering teams on remediation.
• Strong cloud security knowledge across AWS/Azure/GCP.
• Experience with API security and OWASP Top 10.
• Familiar with CI/CD security pipelines and SCA tooling.

Responsibilities

• Perform security testing, vulnerability scanning, and secure code reviews.
• Model threats and identify attack vectors before deployment.
• Advise on secure coding practices to engineering teams.
• Configure and manage WAFs, CI/CD security pipelines, and scanners.
• Manage IAM, SSO, OAuth, MFA, and least-privilege controls.
• Oversee secure SDLC governance and remediation tracking.
• Oversee SBOMs, open-source risk, and supply chain security reviews.
• Review architectures for security risk and design controls.

Skills

Cloud security

Threat modeling

Secure coding

Vulnerability management

API security

CI/CD security

AI security tools

Code review

Tools

GitHub Dependabot

GitHub Advanced Security

SonarQube

OWASP Dependency-Check

Job description

Liquidity Services Inc. is seeking an Application Security Engineer to establish and enforce security standards across the organization. You will conduct regular assessments, identify vulnerabilities, and drive remediation with engineering teams.

You will stay current on threats, govern secure SDLC, and oversee AI security, API security, and cloud platform protections for our applications. You will lead vulnerability triage, implement secure design patterns, and ensure data protection and PCI