Senior Application Security Engineer (Remote US)

3C Deutschland GmbH; Costa Mesa (CA); Remote; USD 120,000 - 150,000; Full time

Job summary

A leading company in data and technology is seeking a Senior Application Security Engineer. This remote role involves collaborating with development teams to address security risks, implementing security tools, and ensuring compliance with audits. Ideal candidates have extensive experience in application security and a solid software development background.

Benefits

Competitive compensation package and bonus plan

Medical, dental, vision benefits

401K matching

Flexible work environment

Flexible time off

Qualifications

• 5+ years of experience in enterprise-level application security.
• Experience in AppSec or DevSecOps with proficiency in security tools.

Responsibilities

• Collaborate with development teams to assess risks and customize solutions.
• Implement and manage security tools and integrate solutions into CI/CD pipelines.

Skills

Application Security

Risk Management

DevSecOps

Collaboration

Tools

SAST

SCA

DAST

CI/CD

Job description

Senior Application Security Engineer (Remote US)

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money.

We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.

We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

In this remote role, reporting to the Director of Application Security, you will work with software engineers and leadership to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC).

You will do this by:

• Collaborating with development teams to understand their needs, assess risks, and customize solutions.
• Implementing and managing security tools (SAST, SCA, DAST) and integrating solutions into CI/CD pipelines.
• Reviewing applications against common flaws (e.g., OWASP Top 10) and providing visibility to senior management.
• Working with Risk & Compliance teams on audits (e.g., SOC 2, PCI-DSS, HIPAA) and recommending relevant policies.
• Defining security guardrails through automated tool policies, SLAs, and custom rules.

Minimum qualifications include:

• 5+ years of experience in enterprise-level application security, with knowledge of MITRE, OWASP, SafeCode, and risk management methodologies.
• Experience in AppSec or DevSecOps, with proficiency in SAST, SCA, DAST, IAST, RASP, and related tools.
• Solid background in software development, familiar with development lifecycle processes, CI/CD pipelines, and cloud architectures.
• Experience with cross-functional application integration and project management skills.

Benefits include:

• Competitive compensation package and bonus plan
• Core benefits: medical, dental, vision, 401K matching
• Flexible work environment: remote, hybrid, or in-office
• Flexible time off including volunteer, vacation, sick days, and paid holidays

Our culture emphasizes diversity, equity, inclusion, work/life balance, development, and wellness. We are proud to be an Equal Opportunity employer and support accommodations for disabilities or special needs.