Senior AppSec Engineer – CI/CD, Cloud & Flextime

AgileEngine, LLC.; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

Flextime

Job summary

AgileEngine, LLC. in Boston, MA is seeking a Senior Application Security Engineer to drive secure development for Fortune 500 clients and innovative startups. You will join a team that treats security as a core enabler of fast software delivery.

You will deploy and tune SAST/DAST/IAST, perform threat modeling, and integrate security into CI/CD with automation. Excellent communication helps you influence engineers and reduce risk across projects.

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment (4+ years).
• Deep experience deploying, tuning, and interpreting SAST/DAST; IAST a plus.
• Experience conducting threat modeling and translating findings into security requirements.
• Experience integrating security testing into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web vulnerabilities.
• Experience with infrastructure-as-code and automation tools (Terraform, CloudFormation, Ansible, Puppet, Chef, Salt).
• Ability to prioritize real security risk and drive timely remediation.
• Strong communication and collaboration across engineering teams.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to prioritize remediation of the highest-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors in the technology stack.
• Collaborate with stakeholders to establish metrics showing application security proficiency across teams.
• Steer tooling development to improve security through automation and faster gains.
• Ensure processes for key systems are documented, maintained, and archived.

Skills

Application Security

Threat Modeling

CI/CD security

SAST/DAST/IAST

AWS security

IaC automation

Security tooling

Communication

Tools

Nessus

Burp Suite

WAF

Terraform

Puppet

Chef

Salt

CloudFormation

Job description

AgileEngine, LLC. in Boston, MA is seeking a Senior Application Security Engineer to drive secure development for Fortune 500 clients and innovative startups. You will join a team that treats security as a core enabler of fast software delivery.

You will deploy and tune SAST/DAST/IAST, perform threat modeling, and integrate security into CI/CD with automation. Excellent communication helps you influence engineers and reduce risk across projects.