Senior AppSec Engineer: Build Secure, Scalable Cloud Apps

World Wide Technology; Maryland Heights (MO); On-site; USD 116,000 - 145,000; Full time

Benefits offered by this job

Health insurance

401k with company matching

Paid time off

Parental leave

Wellness program

Employee discount program

Job summary

World Wide Technology seeks a Senior Application Security Engineer to secure our application ecosystem across cloud and on-premise environments. You will own vulnerability lifecycle, perform threat modeling, secure code reviews, and drive secure coding practices with engineering and DevOps.

In this hands-on role, you’ll operate SCA/SAST/DAST tooling, integrate security into CI/CD, mentor teams, and coordinate penetration testing and risk assessments to reduce risk across WWTs software portfolio.

Qualifications

• Bachelor’s degree or equivalent hands-on experience.
• Minimum 8 years in application security roles.
• Experience securing cloud-native apps and containers.
• Experience with CI/CD integration of security tooling.
• Ability to read code in Java/JS/Python/Go/C#.

Responsibilities

• Own the application vulnerability lifecycle and remediation.
• Operate SCA, SAST, DAST tooling across the SDLC.
• Incorporate security into CI/CD pipelines.
• Conduct threat modeling and secure code reviews.
• Lead penetration testing and risk assessment.

Skills

Application security

Threat modeling

SAST & SCA

CI/CD security

Cloud security

Programming basics

Education

Bachelor's degree in CS/SE/InfoSec

Tools

SAST tooling

SCA tooling

DAST tooling

CI/CD tooling (GitHub Actions, Jenkins, etc.)

Cloud platforms (AWS/Azure/GCP)

Job description

World Wide Technology seeks a Senior Application Security Engineer to secure our application ecosystem across cloud and on-premise environments. You will own vulnerability lifecycle, perform threat modeling, secure code reviews, and drive secure coding practices with engineering and DevOps.

In this hands-on role, you’ll operate SCA/SAST/DAST tooling, integrate security into CI/CD, mentor teams, and coordinate penetration testing and risk assessments to reduce risk across WWTs software portfolio.