Senior Application Security Engineer — Secure CI/CD & Cloud

AgileEngine; West Palm Beach (FL); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy and tune SAST, DAST, and IAST, perform threat modeling, and integrate security controls into CI/CD pipelines, with comfort in Python, JavaScript, or Java and AWS.

You will collaborate with stakeholders to set security metrics, drive remediation of high-risk vulnerabilities, and advance automation to improve security without slowing product delivery.

Qualifications

• Must have hands-on application security experience in a modern software development environment (4+ years).
• Strong ability to read and discuss code in Python, JavaScript, Java, or similar languages.

Responsibilities

• Be part of a bleeding-edge security org enabling secure and reliable apps and products.
• Deploy and tune code scanning solutions (SAST, DAST, IAST).
• Interpret results to drive remediation of top-risk vulnerabilities.
• Perform threat modeling to identify attack vectors in the tech stack.
• Collaborate with stakeholders to establish metrics of security proficiency across teams.
• Develop tools to improve application security through automation and streamlined workflows.

Skills

SAST

DAST

IAST

Threat modeling

CI/CD security

AWS security

Tools

Terraform

CloudFormation

Ansible

Job description

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps across engineering teams. You will deploy and tune SAST, DAST, and IAST, perform threat modeling, and integrate security controls into CI/CD pipelines, with comfort in Python, JavaScript, or Java and AWS.

You will collaborate with stakeholders to set security metrics, drive remediation of high-risk vulnerabilities, and advance automation to improve security without slowing product delivery.