Senior AppSec Engineer: Secure DevOps & SAST/DAST

AgileEngine, LLC.; Orlando (FL); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine is seeking a Senior Application Security Engineer to join our security organization in Orlando, FL. You will deploy and tune SAST, DAST, and IAST tools, interpret results, and drive remediation of high-risk vulnerabilities within an agile development environment.

You will perform threat modeling, collaborate with engineering teams, and integrate security testing into CI/CD pipelines. Strong hands-on app security experience and AWS understanding are required to protect complex

Qualifications

• Authorized to work for any employer in the US without visa sponsorship.
• 4+ years hands-on application security in a modern software-development environment.
• Deep experience deploying, tuning, and interpreting SAST/DAST; IAST a plus.
• Experience conducting threat modeling and translating findings into security requirements.
• Experience integrating security testing into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-app vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Strong communication and influence skills; able to explain security issues to engineers and leaders.
• Collaborative, solutions-oriented approach; build trust with development teams.

Responsibilities

• Be part of a bleeding-edge security organization enabling secure and reliable applications and products.
• Deploy and tune code scanning solutions (SAST, DAST, IAST).
• Interpret code scanning results to prioritize remediation of high-risk vulnerabilities.
• Perform threat modeling of applications to identify threat vectors in the tech stack.
• Collaborate with stakeholders to establish metrics showing security proficiency across engineering teams.
• Steer development of tools to improve application security through automation.
• Ensure processes for key systems are documented, maintained, and archived.

Skills

Application Security

SAST/DAST/IAST

Threat Modeling

CI/CD Security

AWS Cloud

Tools

Terraform

CloudFormation

Ansible

Job description

AgileEngine is seeking a Senior Application Security Engineer to join our security organization in Orlando, FL. You will deploy and tune SAST, DAST, and IAST tools, interpret results, and drive remediation of high-risk vulnerabilities within an agile development environment.

You will perform threat modeling, collaborate with engineering teams, and integrate security testing into CI/CD pipelines. Strong hands-on app security experience and AWS understanding are required to protect complex