Senior AppSec Engineer: Threat Modeling & CI/CD

AgileEngine, LLC.; Georgia; On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

A selection of exciting projects

Flextime

Job summary

AgileEngine is seeking a Senior Application Security Engineer to join our Houston-based security team. You will help enable agile development of secure applications, deploy and tune SAST/DAST/IAST, and translate findings into actionable security requirements.

The role emphasizes threat modeling, security testing integration into CI/CD, and collaboration with engineering to improve the security posture across products.

Qualifications

• Strong hands-on Application Security experience in a modern software-development environment.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus.
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.

Responsibilities

• Be a part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products.
• Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
• Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities.
• Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.
• Collaborate with technology stakeholders to establish metrics that demonstrate application security proficiency across all engineering teams.
• Steer the development of tools to improve the security of applications through automation and other means, allowing for faster and easier security gains by teams.
• Ensure processes associated with key systems are documented, maintained, and archived.

Skills

Application Security

Threat modeling

CI/CD security

Security automation

Communication

Security testing

Tools

SAST tools

DAST tools

IAST

Nessus

Burp Suite

Terraform

CloudFormation

Ansible

Puppet

Chef

Salt

Job description

AgileEngine is seeking a Senior Application Security Engineer to join our Houston-based security team. You will help enable agile development of secure applications, deploy and tune SAST/DAST/IAST, and translate findings into actionable security requirements.

The role emphasizes threat modeling, security testing integration into CI/CD, and collaboration with engineering to improve the security posture across products.