Senior AppSec Engineer – DevSecOps & Cloud Security Lead

IPolarity LLC; Whippany (NJ); On-site; USD 146,136,000 - 197,713,000; Full time

Job summary

IPolarity LLC is seeking an experienced Application Security Engineer to embed security testing across CI/CD for web, mobile, and API-based applications. You will drive risk reduction through automated gates (SAST/DAST/IAST/SCA) and hands-on security validation in fast-paced engineering teams.

The role requires strong DevSecOps expertise, cloud experience, and the ability to partner with developers to improve secure coding practices while maintaining velocity.

Qualifications

• 8–15 years of experience in Application Security, DevSecOps, or Security Architecture.
• Experience securing large-scale enterprise apps across cloud and hybrid environments.
• Certifications preferred: CISSP, CSSLP, GWAPT, OSCP, CEH, Azure/AWS Security Certifications.

Responsibilities

• Design and implement enterprise-wide Application Security programs for web, mobile, and API-based apps.
• Embed security into Agile, DevOps, and CI/CD pipelines with automated gates.
• Conduct manual pentesting and business-logic testing to find issues beyond automated scans.
• Perform threat modeling, attack-path analysis, and architecture reviews.
• Validate remediation effectiveness and secure deployment practices.
• Collaborate with engineering to shift-left security and promote secure coding.

Skills

Application Security

Secure SDLC / DevSecOps

SAST

DAST

IAST

SCA

Web Security

Mobile Security

API Security

Threat Modelling

Vulnerability Management

Secure Code Review

CI/CD Security

Tools

GitHub Actions

Azure DevOps

Jenkins

GitLab

Terraform

CloudFormation

Job description

IPolarity LLC is seeking an experienced Application Security Engineer to embed security testing across CI/CD for web, mobile, and API-based applications. You will drive risk reduction through automated gates (SAST/DAST/IAST/SCA) and hands-on security validation in fast-paced engineering teams.

The role requires strong DevSecOps expertise, cloud experience, and the ability to partner with developers to improve secure coding practices while maintaining velocity.