Senior AppSec Engineer - Remote & CI/CD Security

AgileEngine; Texas City (IL); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation (USD)

Exciting projects with Fortune 500s

Flextime and remote work options

Job summary

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. This role deploys SAST, DAST, and IAST, conducts threat modeling, and integrates security controls into CI/CD pipelines.

Comfort with Python, JavaScript, or Java and AWS is essential. Strong hands-on AppSec experience (4+ years) in a modern software environment is required, along with skills in reading code in multiple languages and IaC tooling.

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
• Ability to read and discuss code in Python, JavaScript, Java, or similar languages
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
• Ability to prioritize true security risk and drive remediation of meaningful vulnerabilities
• Strong communication and influence skills with engineers and leadership
• Collaborative, solutions-oriented approach; able to build trust with development teams

Responsibilities

• Be part of a bleeding-edge security organization enabling secure, reliable applications and products
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST
• Interpret code scanning results and prioritize remediation of highest-risk vulnerabilities
• Perform threat modeling of applications to identify potential threat vectors
• Collaborate with stakeholders to establish metrics showing application security proficiency
• Steer tooling development to improve security through automation and faster gains
• Ensure key systems documentation is maintained and archived

Skills

Application Security

SAST

DAST

IAST

Threat Modeling

CI/CD Security

AWS Security

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

Python

JavaScript

Java

Tools

SAST tools

DAST tools

IAST tools

Job description

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. This role deploys SAST, DAST, and IAST, conducts threat modeling, and integrates security controls into CI/CD pipelines.

Comfort with Python, JavaScript, or Java and AWS is essential. Strong hands-on AppSec experience (4+ years) in a modern software environment is required, along with skills in reading code in multiple languages and IaC tooling.