Senior AppSec Engineer: Flexible Growth & Impact

AgileEngine; Blacksburg (SC); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine Senior Application Security Engineer role seeks a security-focused software engineer adept with SAST, DAST, IAST and threat modeling. The candidate will weave security into CI/CD and collaborate across teams to raise the bar on secure development practices.

The position emphasizes hands-on security with AWS cloud exposure, Python/JS/Java code reading, and strong communication to influence engineering leaders and teams.

Qualifications

• Strong hands-on application security experience in a modern software-development environment.
• Ability to read and discuss code in Python, JavaScript, or Java.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST is a plus.
• Experience conducting threat modeling and translating findings into security requirements.
• Experience integrating security testing into CI/CD pipelines.

Responsibilities

• Deploy and tune code scanning solutions (SAST, DAST, IAST).
• Perform threat modeling to identify threat vectors in the stack.
• Collaborate with stakeholders to establish metrics for application security.
• Develop tools to automate security gains and improve developer workflows.
• Ensure security processes are documented, maintained, and archived.

Skills

Security engineering

SAST/DAST/IAST

Threat modeling

CI/CD integration

Python/JavaScript/Java

AWS security

Communication

Automation

Tools

Terraform

CloudFormation

Puppet

Job description

AgileEngine Senior Application Security Engineer role seeks a security-focused software engineer adept with SAST, DAST, IAST and threat modeling. The candidate will weave security into CI/CD and collaborate across teams to raise the bar on secure development practices.

The position emphasizes hands-on security with AWS cloud exposure, Python/JS/Java code reading, and strong communication to influence engineering leaders and teams.