Senior AppSec Engineer – Remote, SDLC & Threat Modeling

Description GovDeals; United States; Remote; USD 107,000 - 134,000; Full time

Benefits offered by this job

Competitive wages

401(k) plan

Paid time off (PTO) and holidays

Paid parental leave

Life and disability insurance

Employee Assistance Program (EAP)

Professional development and tuition),

Job summary

Liquidity Services seeks an application security engineer to establish and enforce security standards across the organization, conducting assessments and remediating vulnerabilities in collaboration with internal and external teams.

The role focuses on threat modeling, secure coding guidance, API and cloud security, and secure SDLC governance. It requires evaluating AI-assisted development tools and maintaining strong security practices across AWS/Azure/GCP and CI/CD pipelines.

Qualifications

• Minimum 5+ years in application security, secure software development, pen testing, or DevSecOps security.
• Experience influencing engineering teams and remediation across multiple development teams.
• Deep knowledge of AWS, Azure, or GCP and how to secure their services.
• Knowledge of SSDLC, threat modeling, secure code reviews, and related practices.
• Experience with Git, Docker, and automated testing integrations.
• Experience securing pipelines, secrets, and artifact integrity.

Responsibilities

• Perform security assessments, penetration testing, and secure code reviews.
• Analyze designs for potential attack vectors and risks before deployment.
• Advise on secure coding standards and OWASP Top 10 across teams.
• Configure and manage WAFs, CI/CD security, and automated scanners.
• Manage SSO, SAML/OIDC, OAuth, MFA, and least-privilege access.
• Define secure design reviews, security gates, release approvals, and remediation tracking.
• Oversee software composition analysis, SBOMs, and third‑party component security.
• Review architectures to define compensating controls and secure patterns.
• Promote secure use of AI coding assistants and review AI-generated code.
• Manage vulnerability triage, risk ratings, remediation deadlines, retesting and reporting.
• Support secure handling of PII, encryption, data minimization and privacy by design.
• Secure payment integrations, assess PCI DSS scope, and review vendor security.
• Support incident response, logging, alerting, and post-incident actions.

Skills

Cloud security

Threat modeling

Secure SDLC

Code reviews

AI-assisted tools

Vulnerability management

API security

CI/CD security

Education

5+ years in application security

SSDLC knowledge

Bachelors in CS or related

Tools

Docker

Git

Terraform

CloudFormation

SCA/DAST/SAST tools

OWASP ZAP

Secrets management

Job description

Liquidity Services seeks an application security engineer to establish and enforce security standards across the organization, conducting assessments and remediating vulnerabilities in collaboration with internal and external teams.

The role focuses on threat modeling, secure coding guidance, API and cloud security, and secure SDLC governance. It requires evaluating AI-assisted development tools and maintaining strong security practices across AWS/Azure/GCP and CI/CD pipelines.