Senior AppSec Engineer: DevSecOps & Secure SDLC

Tential Solutions; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO

Benefits package

Career growth

Job summary

Tential Solutions is seeking an experienced Application Security Engineer to serve as a trusted security advisor embedded within our Agile development organization. This role partners with software engineering teams to integrate security throughout the SDLC, ensuring applications and APIs are designed, built, and deployed securely.

This role will advance application security practices, drive DevSecOps maturity, and help development teams proactively identify and remediate security risks.

Qualifications

• 5+ years in Application Security, Secure Software Development, DevSecOps, or related cybersecurity discipline.
• Hands-on in threat modeling and security architecture reviews.
• Strong understanding of vulnerability management and remediation processes.
• Experience with security testing programs using SAST, DAST, and SCA.
• Knowledge of OWASP Top 10, SANS/CWE vulnerabilities, and secure coding principles.
• Experience partnering directly with software development teams.

Responsibilities

• Serve as the primary Application Security advisor for development teams.
• Embed security best practices throughout the SDLC.
• Conduct threat modeling and security risk assessments for applications and APIs.
• Review architectures, data flows, and new features for security.
• Validate, triage, and remediate vulnerabilities from security tools.
• Support sprint planning and Agile ceremonies to embed security requirements.
• Promote secure coding practices and maturity of DevSecOps programs.
• Translate security risks into actionable business recommendations.

Skills

Threat modeling

Security architecture reviews

Vulnerability management

SAST/DAST/SCA

OWASP Top 10

DevSecOps

Secure SDLC

Code analysis

Communication

Tools

Burp Suite

OWASP ZAP

Wireshark

Nessus

Qualys

Metasploit

Job description

Tential Solutions is seeking an experienced Application Security Engineer to serve as a trusted security advisor embedded within our Agile development organization. This role partners with software engineering teams to integrate security throughout the SDLC, ensuring applications and APIs are designed, built, and deployed securely.

This role will advance application security practices, drive DevSecOps maturity, and help development teams proactively identify and remediate security risks.