Senior AppSec Engineer — Remote, SDLC Security Leader

STEPS Talent; Boston (MA); Remote; USD 150,000 - 190,000; Full time

Job summary

STEPS Talent seeks a Senior Security Engineer - Application Security to join our Information Security team remotely. You will protect our infrastructure, applications, cloud security, and customer trust as part of a lean, cross-functional team spanning AppSec, CloudSec, SecOps, ITSec, and Compliance.

You will lead secure SDLC practices, partner with engineering to embed security in architecture and deployment, and perform hands-on testing of web apps, APIs, and cloud services while building

Qualifications

• 4+ years in application/product/software security as an individual contributor or software engineer turned security
• Strong understanding of vulnerabilities and attack techniques including OWASP Top 10 and API risks
• Experience manual security testing of web apps, APIs and distributed systems
• Ability to review architecture and source code for security weaknesses
• Experience integrating security tools into CI/CD workflows
• Familiarity with SAST, DAST, secrets detection, container security, IaC scanning
• Knowledge of authentication, authorization, session management, cryptography, secrets management
• Strong cloud expertise (AWS/GCP/Azure) and AI code development security implications
• Experience establishing enterprise-wide security policies and guidelines

Responsibilities

• Lead the development and implementation of robust application security protocols across the SDLC
• Partner with engineering to embed security into architecture, design, development, testing and deployment
• Perform hands-on security testing of web apps, APIs and cloud-native services
• Build and improve automated security testing within CI/CD pipelines (SAST, SCA, DAST, secrets, container scanning, dynamic testing)
• Evaluate effectiveness of security tools and reduce findings and developer friction
• Develop secure coding standards and developer-focused documentation
• Contribute security expertise to vulnerability management and incident response
• Assess third-party apps, libraries, APIs for security risk
• Ensure compliance with healthcare regulatory requirements (e.g., HIPAA, GDPR) across product lines

Skills

Application Security

OWASP Top 10

API security

Web security testing

CI/CD security

Cloud security

Security policies

Architecture review

Job description

STEPS Talent seeks a Senior Security Engineer - Application Security to join our Information Security team remotely. You will protect our infrastructure, applications, cloud security, and customer trust as part of a lean, cross-functional team spanning AppSec, CloudSec, SecOps, ITSec, and Compliance.

You will lead secure SDLC practices, partner with engineering to embed security in architecture and deployment, and perform hands-on testing of web apps, APIs, and cloud services while building