Senior AppSec Engineer: Secure SDLC, AI & Cloud Security

Arch Insurance Group Inc.; Farmington (CT); On-site; USD 127,000 - 172,000; Full time

Benefits offered by this job

Medical plans

Dental & vision

401k with company match

PTO 20 days

Holidays

Volunteer Time Off

Life Insurance

Short/Long-Term Disability

Job summary

Arch Insurance Group Inc. is seeking an Application Security Specialist to strengthen the SDLC by shaping strategy, implementing controls, and guiding secure development practices across teams.

You'll drive security testing initiatives (DAST, SAST, SCA), integrate security into CI/CD, and embed AI-specific guardrails. The role requires collaboration with engineers, architects, and product teams to reduce risk and improve delivery.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• 5+ years of cybersecurity experience with hands-on application security.
• Experience with AI-native products, threat modeling and secure architecture reviews.
• Experience deploying and operating DAST, SAST, and CI/CD security integrations.

Responsibilities

• Guide AppSec strategy across the SDLC and secure software delivery.
• Configure AppSec tooling, dashboards, and CI/CD integrations.
• Drive API, container, and application security testing (DAST/others).
• Develop security standards and provide training to dev and cloud teams.
• Provide incident response support and metrics reporting.

Skills

Application security

Threat modeling

CI/CD security

Secure development practices

Education

Bachelor's degree or related field

Tools

SAST

SCA

DAST

Azure

AWS

Job description

Arch Insurance Group Inc. is seeking an Application Security Specialist to strengthen the SDLC by shaping strategy, implementing controls, and guiding secure development practices across teams.

You'll drive security testing initiatives (DAST, SAST, SCA), integrate security into CI/CD, and embed AI-specific guardrails. The role requires collaboration with engineers, architects, and product teams to reduce risk and improve delivery.