Senior AppSec Engineer - Remote

Bright Vision Technologies; Monroeville (Allegheny County); Remote; USD 100,000 - 160,000; Full time

Job summary

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems and reduce risk. The role blends offensive and defensive security with strong communication, aiming to help development teams build secure software efficiently while shipping improvements that reduce production risk.

You will drive threat modeling, code reviews, and security testing across CI/CD pipelines,

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Ten or more years of application security or security engineering experience.
• Strong understanding of authentication, authorization, and cryptographic primitives.
• Hands-on experience with code review across multiple languages.

Responsibilities

• Conduct threat modeling and security architecture reviews for new and existing applications and services.
• Perform manual code reviews, secure design consultations, and pair with engineering teams on hardening critical components.
• Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines.
• Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking.
• Build paved-road libraries and frameworks that make secure patterns the default for engineering teams.
• Lead red-team and purple-team exercises against internal applications and drive remediation of identified weaknesses.
• Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms.
• Design and enforce secure authentication, authorization, session management, and cryptographic patterns.
• Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments.
• Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff.
• Respond to security incidents involving application vulnerabilities or active exploitation.
• Track and apply emerging threats and CVEs that may affect the application portfolio.
• Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures — so that the system remains supportable, auditable, and easy to onboard new engineers onto over time.
• Stay current with application security research and emerging defensive tooling.

Skills

OWASP Top 10 knowledge

Code review across languages

Security architecture

Vulnerability management

Strong communication

Tooling for automation (Python/Go)

Agile/Scrum experience

Threat modeling

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

CI/CD security tooling

Cloud security controls

Job description

Bright Vision Technologies is seeking an Application Security Engineer to embed security across the software development lifecycle, partnering with engineering teams to design secure systems and reduce risk. The role blends offensive and defensive security with strong communication, aiming to help development teams build secure software efficiently while shipping improvements that reduce production risk.

You will drive threat modeling, code reviews, and security testing across CI/CD pipelines,