Senior Application Security Engineer - Virtual - USA

Kelly Services Inc.; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

Kelly Services is seeking a Senior Application Security Engineer to ensure the security of applications across web, mobile, and cloud platforms. The role involves integrating security into the Software Development Lifecycle (SDLC) and conducting thorough security assessments. A strong candidate will have a background in secure coding and demonstrated expertise in various security tools and methodologies, along with relevant certifications. This position offers an opportunity to influence meaningful change within a collaborative environment.

Qualifications

• 3+ years of hands-on experience in application security, secure coding, or penetration testing.
• Familiarity with OWASP Top 10 and other security frameworks.
• Strong communication skills for explaining complex concepts.

Responsibilities

• Safeguard applications by embedding security best practices throughout the software development lifecycle.
• Work with development teams to protect applications from threats.
• Conduct security assessments and identify vulnerabilities.

Skills

Secure coding

Application security

Vulnerability assessment

Incident Response

Threat Modeling

Security tools proficiency

Education

Relevant certifications (e.g., CISSP, CEH, OSCP, CSSLP)

Tools

Veracode

OWASP

ZAP

Job description

12665 - Senior Application Security Engineer - Virtual - USA

Job Reference: 12665 - Posted 16-Jun-2025

Together, we change lives.

Kelly is a team of experts driven by our belief that the impact of the right person in the right job is limitless.

No matter where you are in your career journey, you can apply your knowledge and passion to move people, organizations, and communities forward. You'll have opportunities to grow your expertise and capabilities, both professionally and personally. As a team, we celebrate inclusion, caring, and collaboration. As a company we value your contribution, we work with integrity, and we always put people first - so your impact really will change lives.

Kelly's Application Security Engineer is responsible for:

• Safeguarding our applications by embedding security best practices throughout the software development lifecycle (SDLC).
• Working closely with development teams, security architects, and business stakeholders to protect our web, mobile, and cloud-based applications from emerging threats and vulnerabilities.
• Ensuring secure coding, vulnerability assessment, and application security testing, paired with a proactive mindset to stay ahead in the ever-evolving cybersecurity landscape.
• Integrate Security into the SDLC
• Conduct Security Assessments
• Identify and Mitigate Vulnerabilities
• Implement Security Tools
• Develop Security Policies and Standards
• Threat Modeling and Risk Assessments
• Incident Investigation and Response
• Stay Ahead of Emerging Threats
• Security Training and Awareness
• Remediation Planning
• 3+ years of hands-on experience in application security, secure coding, or penetration testing.
• Deep understanding of security vulnerabilities, including familiarity with OWASP Top 10, SANS CWE, and the CVE database.
• Proficiency with security testing tools such as Veracode, OWASP, and ZAP.
• Experience with secure development frameworks and methodologies (e.g., DevSecOps, Agile).
• Strong communication skills can explain complex security concepts to technical and non-technical audiences alike.
• Relevant certifications (e.g., CISSP, CEH, OSCP, CSSLP) are highly desirable.

Total compensation package and benefits commensurate with the position. [1] Kelly Services | People (benefitsatkelly.com)

Kelly is an equal opportunity employer committed to employing a diverse, equitable, and inclusive workforce, including, but not limited to, race, gender, individuals with disabilities, protected veterans, sexual orientation, and gender identity. Equal Employment Opportunity is The Law.