Senior AppSec Engineer - Remote & Flexible Growth

AgileEngine, LLC.; Texas City (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine in the United States is seeking a Senior Application Security Engineer to join a cutting-edge security team focused on secure development practices across our software products.

You will deploy and tune SAST, DAST, and IAST solutions, interpret results, and drive remediation of high-risk vulnerabilities while modeling threats and collaborating with engineering teams to raise security standards across the organization.

Qualifications

• 4+ years hands-on application security in modern software environments.
• Deep experience deploying and interpreting SAST/DAST; IAST a plus.
• Experience threat modeling and turning findings into security requirements.
• Experience integrating security into CI/CD pipelines.
• Knowledge of AWS cloud security, APIs, auth, secrets management, web vulnerabilities.
• Experience with infrastructure-as-code and automation tools.

Responsibilities

• Be part of security org enabling secure app development.
• Deploy and tune code scanning (SAST/DAST/IAST).
• Translate scanning results to remediation priorities.
• Perform threat modeling to identify attack vectors.
• Collaborate to establish metrics for security across teams.
• Develop tools to automate security gains and speed up fixes.
• Maintain documentation for key systems.

Skills

Application Security

Threat modeling

CI/CD security

AWS security

Automation tooling

Security communications

Tools

SAST tools

DAST tools

IAST

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

Nessus

Burp

Job description

AgileEngine in the United States is seeking a Senior Application Security Engineer to join a cutting-edge security team focused on secure development practices across our software products.

You will deploy and tune SAST, DAST, and IAST solutions, interpret results, and drive remediation of high-risk vulnerabilities while modeling threats and collaborating with engineering teams to raise security standards across the organization.