Senior AppSec Engineer — Secure AI & Cloud Apps

World-Wide-Technology; United States; Remote; USD 116,000 - 145,000; Full time

Benefits offered by this job

Health & Wellness

401k with company match

PTO & Holidays

Parental Leave

Tuition Reimbursement

Employee Discount

Job summary

World Wide Technology is hiring a Senior Application Security Engineer to secure our application ecosystem. You will work hands-on across threat modeling, secure code reviews, and security tooling, partnering with engineering and DevOps to embed security in the SDLC in containerized, cloud-native environments.

We seek an experienced professional who can lead vulnerability lifecycle, drive secure code practices, and contribute to compliance mappings for standards such as NIST 800-53 and SOC 2.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Information Security, or equivalent hands-on experience.
• Minimum 8 years of experience in application security or related fields.
• Experience securing cloud-native and containerized apps; strong communication skills.
• Applicants must be authorized to work in the United States without sponsorship.

Responsibilities

• Own the vulnerability lifecycle, drive discovery, validate exploitability, prioritize risks, guide remediation.
• Maintain and drive adoption of SCA/SAST/DAST tooling across the SDLC; integrate into CI/CD.
• Perform secure code reviews, threat modeling, and architecture reviews for high-risk apps.
• Conduct penetration testing and remediation validation across environments.
• Address AI/LLM security risks, evidence, and control mappings for audits.

Skills

AppSec ownership

Threat modeling

SAST/SCA

CI/CD integration

Cloud security

Docker/Kubernetes

Python scripting

OWASP/MITRE

Strong communication

Education

Bachelor's degree in CS or related

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Kubernetes

SAST/SCA tooling

Job description

World Wide Technology is hiring a Senior Application Security Engineer to secure our application ecosystem. You will work hands-on across threat modeling, secure code reviews, and security tooling, partnering with engineering and DevOps to embed security in the SDLC in containerized, cloud-native environments.

We seek an experienced professional who can lead vulnerability lifecycle, drive secure code practices, and contribute to compliance mappings for standards such as NIST 800-53 and SOC 2.