Senior AppSec Engineer — AI-Driven Security & DevSecOps

Australia-Employment; New York (NY); On-site; USD 83,000 - 96,000; Full time

Job summary

Jobot in New York, NY is seeking an experienced Application Security Engineer to build and scale an enterprise AppSec program, spanning discovery, tooling, CI/CD integrations and secure coding practices.

You will work across diverse tech stacks, apply AI-assisted security workflows, and influence engineering leaders while delivering measurable reductions in risk. This on-site consulting role offers high visibility and meaningful impact in shaping secure development across the organization.

Qualifications

• 7+ years of experience in application security, product security, or security engineering.
• 3+ years of experience supporting complex environments with multiple independent business units, brands, product groups, or engineering organizations.
• Hands-on experience implementing and operating modern AppSec tools such as Semgrep, Snyk, Checkmarx, Veracode, Apiiro, Ox Security, GitHub Advanced Security, or similar platforms.
• Code-level proficiency in at least three commonly used programming languages such as Python, JavaScript/TypeScript, Java, C#, or Go, with the ability to review code and effectively validate security findings.
• Strong scripting and automation skills, ideally in Python or a comparable language.
• Experience building integrations using REST APIs and working within CI/CD environments such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
• Demonstrated success influencing engineering teams and driving security adoption without direct authority.
• Strong understanding of the OWASP Top 10, modern application attack patterns, software supply chain risks, and threat modeling methodologies such as STRIDE or PASTA.

Responsibilities

• Lead application discovery and inventory efforts across multiple business units, including ownership mapping, technology stack profiling, and risk tiering.
• Implement, integrate, and operate modern application security tooling, including SAST, SCA, secrets scanning, container security, and IaC scanning.
• Embed security tooling and controls directly into CI/CD pipelines to make security part of the development lifecycle.
• Design and implement AI-assisted triage workflows to prioritize findings, reduce false positives, and prevent alert fatigue.
• Establish and evolve secure SDLC standards, threat modeling practices, security requirements, and development gates.
• Partner with engineering and development leaders to create practical AppSec playbooks that improve security while enabling speed of delivery.
• Shape the organization’s approach to AI within application security, evaluating AI-assisted code review, automated testing, and remediation guidance.
• Develop meaningful metrics and executive-level reporting linking AppSec initiatives to risk reductions.

Skills

Python

JavaScript/TypeScript

Java

C#

Go

CI/CD

Code review

Threat modeling

Tools

Semgrep

Snyk

Checkmarx

Veracode

Apiiro

Ox Security

GitHub Advanced Security

REST APIs

Job description

Jobot in New York, NY is seeking an experienced Application Security Engineer to build and scale an enterprise AppSec program, spanning discovery, tooling, CI/CD integrations and secure coding practices.

You will work across diverse tech stacks, apply AI-assisted security workflows, and influence engineering leaders while delivering measurable reductions in risk. This on-site consulting role offers high visibility and meaningful impact in shaping secure development across the organization.