Senior AppSec Engineer — AI-Driven Security in CI/CD

Akaasa Technologies; North Carolina; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Akaasa Technologies is seeking an Application Security Engineer to drive security across a hybrid environment in New York, NY or Charlotte, NC. You will lead discovery of applications, deploy and manage SAST/SCA and AI-assisted workflows, and collaborate with developers to embed security into the SDLC.

The role requires 7+ years in the field, hands-on tool experience, and strong scripting skills to automate integrations with CI/CD pipelines.

Qualifications

• 7+ years in application security across multiple business units.
• Hands-on with modern security tools such as Semgrep, Snyk, Checkmarx, Veracode, Apiiro, Ox Security, or GitHub Advanced Security.
• Proficiency in Python, JavaScript/TypeScript, Java, C#, or Go for reading, reviewing, and triaging findings.

Responsibilities

• Leads the discovery and inventory of applications across units, including ownership mapping and risk tiering.
• Stands up and operates the application security tooling stack (SAST, SCA, secrets scanning, container/IaC scanning) in CI/CD pipelines.
• Designs and implements AI-assisted triage workflows to reduce developer workload and filter false positives.
• Defines secure SDLC requirements, threat modeling practices, and security gates adopted by business units.
• Partners with development leaders to build relationships and operationalize security without delaying delivery.
• Contributes to AI security strategy by evaluating tools like AI code review assistants and automated testing solutions.
• Produces executive-ready metrics showing how security activities mitigate business risks.

Skills

Application Security

SAST

SCA

Secrets Scanning

Container/IaC Scanning

CI/CD Pipelines

Python Scripting

REST API Integrations

Influence Stakeholders

AI-assisted Workflows

Tools

Semgrep

Snyk

Checkmarx

Veracode

Apiiro

Ox Security

GitHub Advanced Security

Job description

Akaasa Technologies is seeking an Application Security Engineer to drive security across a hybrid environment in New York, NY or Charlotte, NC. You will lead discovery of applications, deploy and manage SAST/SCA and AI-assisted workflows, and collaborate with developers to embed security into the SDLC.

The role requires 7+ years in the field, hands-on tool experience, and strong scripting skills to automate integrations with CI/CD pipelines.