Senior AppSec Engineer & DevSecOps Advocate

Socket.dev; Dresher (Montgomery County); On-site; USD 120,000 - 180,000; Full time

Job summary

Ascensus is seeking an Application Security Engineer to drive the security program across our web and API systems. You will partner with scrum teams, define secure development practices, and lead threat modeling, architecture reviews, and vulnerability management.

Strong collaboration with security leadership is essential to meet organizational goals. Responsibilities include integrating SAST/DAST/SCA into CI/CD, guiding remediation, and ensuring compliance with key security standards.

Qualifications

• 7+ years in Secure Software Development and/or DevSecOps.
• Ability to define software security and privacy requirements.
• Strong threat modeling, risk management, and mitigation skills.
• Experience creating security architecture diagrams and specifications.
• Experience performing secure design reviews.
• Experience integrating SAST/DAST and SCA into CI/CD pipelines.
• Experience with application testing tools (Burp Suite, Fiddler, ZAP, Wireshark, Metasploit).
• Familiarity with WAFs, API Gateways, and security tooling.
• Knowledge of OWASP Top 10, CWE/SANS Top 25.
• Exposure to SDL, SAMM, or BSIMM frameworks.
• Experience evaluating third‑party components for security.

Responsibilities

• Protect confidential data and ensure secure handling to prevent unauthorized access.
• Provide security guidance to scrum teams and developers on secure SDLC practices.
• Collaborate with leadership to implement agile DevSecOps across SDLC stages.
• Conduct architecture reviews, data-flow analysis, and threat modeling.
• Support security testing in CI/CD, triage findings, and guide remediation.
• Ensure security policies and controls are applied across services and APIs.
• Assist with additional security tasks and projects as needed.

Skills

Secure SDLC

Threat modeling

DevSecOps

CI/CD security

Vulnerability remediation

Security testing tools

OWASP Top 10

API security

Architecture reviews

Secure coding practices

Tools

Burp Suite

Fiddler

OWASP ZAP

Wireshark

Metasploit

Job description

Ascensus is seeking an Application Security Engineer to drive the security program across our web and API systems. You will partner with scrum teams, define secure development practices, and lead threat modeling, architecture reviews, and vulnerability management.

Strong collaboration with security leadership is essential to meet organizational goals. Responsibilities include integrating SAST/DAST/SCA into CI/CD, guiding remediation, and ensuring compliance with key security standards.