Senior AppSec Engineer: Secure SDLC & CI/CD Lead

TripleLift; London (KY); On-site; USD 140,000 - 180,000; Full time

Job summary

TripleLift is seeking a Senior Application Security Engineer to advance secure software development across our engineering and security teams. You will shape secure coding practices, implement tooling, and drive vulnerability remediation and CI/CD security within a high-stakes ad-tech environment.

In this role you will partner with Engineering, Platform, and Cloud Infra to embed security into design and deployment, while elevating the organization’s security maturity and resilience.

Qualifications

• 5+ years in application security or related roles.
• Experience with GHAS including code scanning, secret scanning, dependency review.
• Hands-on security testing in CI/CD pipelines and secure coding remediation.

Responsibilities

• Build and maintain a global security compliance program based on NIST CSF.
• Scale application security with automated testing (SAST, DAST, code-review).
• Promote secure SDLC and secure deployment practices.

Skills

NIST CSF

Threat modeling

CI/CD security

Penetration testing

Secure coding guidance

AWS security

Security architecture reviews

Python/Java/TS/Go

Education

Bachelor's degree

Tools

GHAS (Code Scanning)

CodeQL

Burp Suite

OWASP ZAP

Snyk

Checkmarx

Veracode

Job description

TripleLift is seeking a Senior Application Security Engineer to advance secure software development across our engineering and security teams. You will shape secure coding practices, implement tooling, and drive vulnerability remediation and CI/CD security within a high-stakes ad-tech environment.

In this role you will partner with Engineering, Platform, and Cloud Infra to embed security into design and deployment, while elevating the organization’s security maturity and resilience.