Senior AppSec Engineer: AI-Driven Secure SDLC & CI/CD

A-Line Staffing Solutions; Charlotte (NC); Hybrid; USD 56,000 - 94,000; Full time

Job summary

A-Line Staffing Solutions in New York, NY or Charlotte, NC is seeking an experienced Application Security Engineer to build and scale an enterprise AppSec program. This hands-on role works with security tooling, CI/CD pipelines, and secure SDLC practices.

You will lead vulnerability triage workflows, threat modeling, and integration with development teams, influencing engineering leaders without direct authority. Strong scripting and REST API experience are essential.

Qualifications

• 7+ years in Application Security or related field.
• Experience across multiple business units or product lines.
• Hands-on with AppSec platforms (Semgrep, Checkmarx, Veracode, Ox Security, GHAS).
• Ability to read code, triage findings, and automate security tasks.
• Strong scripting (Python) and REST API integrations.
• CI/CD experience with GitHub Actions or Jenkins.
• Strong knowledge of OWASP Top 10 and threat modeling methods.

Responsibilities

• Perform application discovery and inventory across multiple units.
• Map ownership, tech stacks, and risk classifications.
• Operate AppSec tooling (SAST, SCA, secrets, container, IaC scanning).
• Integrate AppSec into CI/CD pipelines.
• Design AI-assisted vulnerability triage workflows to minimize false positives.
• Define secure SDLC requirements and threat-modeling practices.
• Collaborate with engineering leaders to enable security without slowing delivery.
• Develop shared AppSec standards and playbooks across teams.
• Evaluate emerging AI security technologies for risk and value.
• Develop metrics linking AppSec activities to business risk reduction.
• Promote secure coding practices across engineering teams.

Skills

Application Security

Cross-organization collaboration

AppSec tooling

SAST

SCA

Secrets scanning

Container scanning

IaC scanning

CI/CD integration

Threat modeling

Python scripting

REST APIs

GitHub Actions / Jenkins

OWASP Top 10

STRIDE/PASTA

Influence without authority

Security metrics

Job description

A-Line Staffing Solutions in New York, NY or Charlotte, NC is seeking an experienced Application Security Engineer to build and scale an enterprise AppSec program. This hands-on role works with security tooling, CI/CD pipelines, and secure SDLC practices.

You will lead vulnerability triage workflows, threat modeling, and integration with development teams, influencing engineering leaders without direct authority. Strong scripting and REST API experience are essential.