Senior AppSec Engineer - Secure CI/CD & Cloud (Flextime)

AgileEngine; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

Exciting projects

Flextime

Job summary

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. You will deploy and tune SAST, DAST, and IAST tools and integrate security controls into CI/CD pipelines on AWS.

You should be proficient in Python, JavaScript, or Java, with hands-on security experience, threat modeling, and the ability to translate findings into actionable remediation. Collaboration with stakeholders is essential.

Qualifications

• Hands-on Application Security experience in a modern software development environment (4+ years).
• Ability to read and discuss code in Python, JavaScript, Java, or similar languages.
• Experience deploying, tuning, and interpreting SAST/DAST/IAST tools; IAST a plus.
• Ability to conduct threat modeling and translate findings into security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Knowledge of AWS/cloud security, APIs, authentication/authorization, secrets management, and common web vulnerabilities.
• Familiarity with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.

Responsibilities

• Deploy and tune code scanning solutions (SAST, DAST, IAST).
• Interpret findings to drive remediation of high-risk vulnerabilities.
• Perform threat modeling to identify threat vectors in the tech stack.
• Collaborate with engineering stakeholders to demonstrate security proficiency with metrics.
• Develop tools to automate security gains and speed remediation.
• Maintain documentation for key security systems and processes.

Skills

Application Security

Python/JavaScript/Java

Threat Modeling

CI/CD Security

AWS Security

Communication

Tools

SAST Tools

DAST Tools

IAST Tools

Terraform

CloudFormation

Burp Suite

Nessus

Job description

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. You will deploy and tune SAST, DAST, and IAST tools and integrate security controls into CI/CD pipelines on AWS.

You should be proficient in Python, JavaScript, or Java, with hands-on security experience, threat modeling, and the ability to translate findings into actionable remediation. Collaboration with stakeholders is essential.