Senior Application Security Engineer (Remote) – SSDLC & Cloud Security

Liquidity Services, Inc.; United States; Remote; USD 107,000 - 134,000; Full time

Benefits offered by this job

Healthcare

401(k)

PTO and holidays

Parental leave

Life and disability insurance

EAP

Professional development

Tuition assistance

Job summary

Liquidity Services, Inc. is seeking an Application Security Engineer to establish and enforce security standards across our software environment. You will conduct regular assessments, identify vulnerabilities, and work with development, security, and product teams to remediate them.

You will stay current on threats, guide secure SDLC practices, review IaC, and implement API security, IAM, and container security controls across AWS/Azure/GCP environments.

Qualifications

• Minimum 5+ years in application security, secure software development, or DevSecOps.
• Experience influencing engineering teams and remediation across multiple development teams.
• Deep knowledge of AWS, Azure, or GCP security.
• Understanding of DNS, HTTP, TLS and browser security controls.
• Knowledge of SSDLC, threat modeling, secure code reviews.
• Experience with Git, Docker, and CI/CD security practices.
• Experience with API gateways, OAuth 2.0, and API key rotation policies.
• Experience securing IaC across AWS and Azure (Terraform, CloudFormation, ARM/Bicep).
• Knowledge of secrets managers and automated secrets scanning.

Responsibilities

• Establish and enforce security standards and best practices.
• Conduct regular security assessments and identify vulnerabilities.
• Collaborate with internal and external teams to remediate issues.
• Stay up to date with threats, trends, and countermeasures.
• Review infrastructure as code and secure REST/GraphQL APIs.
• Implement API security, container security, and CI/CD security controls.

Skills

Security engineering

Communication

DevSecOps

Threat modeling

API security

CI/CD security

Container security

Code review

SAST/DAST

Tools

Claude Security

Copilot Security

GitHub Dependabot

GitHub Advanced Security

SonarQube

OWASP Dependency-Check

Job description

Liquidity Services, Inc. is seeking an Application Security Engineer to establish and enforce security standards across our software environment. You will conduct regular assessments, identify vulnerabilities, and work with development, security, and product teams to remediate them.

You will stay current on threats, guide secure SDLC practices, review IaC, and implement API security, IAM, and container security controls across AWS/Azure/GCP environments.