Senior AppSec Engineer — Secure SDLC, Remote

platacard; United States; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Relocation & visa support

Flexible work options

Healthcare coverage

Education budget

Wellness budget

20 days annual leave + sick leave

Job summary

platacard is seeking a Senior Application Security Engineer to embed protective controls across the full software development lifecycle. You will bridge development and security, designing safeguards and shaping secure coding culture.

You will drive threat modeling, implement CI/CD security tooling (SAST/DAST/IAST/RASP/SCA), lead incident response, and run OWASP/ASVS training to raise developer awareness.

Qualifications

• Hands-on experience with web and mobile programming languages.
• Deep knowledge of modern web architectures, especially microservices.
• Practical knowledge of OWASP Top 10, threat modeling, and security testing frameworks.

Responsibilities

• Promote secure coding in the SDLC and participate in code reviews.
• Perform architecture reviews and threat modeling to surface risks.
• Deploy and maintain automated security tooling in CI/CD pipelines.
• Lead security incident response, containment and post-incident hardening.
• Champion shift-left and security-first mindset across engineering.
• Run workshops on OWASP, ASVS and secure design standards.

Skills

Web & mobile programming

Microservices

OWASP Top 10

Threat modeling

Security testing

Analytical

Tools

ZAP

Dependency-Track

Burp Suite

Job description

platacard is seeking a Senior Application Security Engineer to embed protective controls across the full software development lifecycle. You will bridge development and security, designing safeguards and shaping secure coding culture.

You will drive threat modeling, implement CI/CD security tooling (SAST/DAST/IAST/RASP/SCA), lead incident response, and run OWASP/ASVS training to raise developer awareness.