Senior AppSec Engineer: Drive Secure Software at Ad Tech Scale

TripleLift; New London (NY); On-site; USD 125,000 - 165,000; Full time

Benefits offered by this job

Medical, Dental & Vision Plans

Flexible PTO

401k with employer match

Job summary

TripleLift is seeking a Senior Application Security Engineer to drive secure software development and security maturity across engineering. You will partner with Platform, Cloud, and Security teams to shape secure coding practices, tooling, and vulnerability remediation in a fast-paced ad-tech environment.

You will own threat modeling, security reviews, and integration of security tools in CI/CD, helping protect advertising platforms and publishers’ trust.

Qualifications

• 5 years minimum of experience in application security or related field.
• Experience with GHAS including Code Scanning, Secret Scanning and Dependency Review.
• Proficiency with SAST/DAST/SCA tools and CI/CD pipeline integration.
• Hands-on penetration testing across web apps, APIs, or cloud.
• Knowledge of OWASP Top 10 and common mitigations.

Responsibilities

• Build and maintain a global security compliance program based on NIST CSF.
• Scale application security with automated security testing in CI/CD.
• Lead secure coding and remediation activities across teams.
• Automate security testing in CI/CD pipelines and maintain integrations.

Skills

Secure software development

CI/CD security

Threat modeling

Penetration testing

GHAS proficiency

Tools

GHAS

CodeQL

Burp Suite

OWASP ZAP

Snyk

Checkmarx

Veracode

Job description

TripleLift is seeking a Senior Application Security Engineer to drive secure software development and security maturity across engineering. You will partner with Platform, Cloud, and Security teams to shape secure coding practices, tooling, and vulnerability remediation in a fast-paced ad-tech environment.

You will own threat modeling, security reviews, and integration of security tools in CI/CD, helping protect advertising platforms and publishers’ trust.