Senior AppSec Leader: Shape Our Secure SDLC

InfraTech Solutions LLC; Chicago (IL); On-site; USD 140,000 - 210,000; Full time

Job summary

InfraTech Solutions LLC in Chicago is seeking a Senior Application Security Engineer to own and drive our appsec program. You will work hands-on with engineering teams to embed secure development practices and guide security considerations for new features, architectures, and services.

You will lead security tooling and automation, integrate with CI/CD, and collaborate with DevOps to secure AWS infrastructure, ECS, IAM, and container security.

Qualifications

• 3–7+ years of experience in Application Security or related engineering roles.
• Strong understanding of secure coding practices and OWASP Top 10.
• Experience with cloud-native apps, preferably AWS.
• Familiarity with GitHub-based workflows and CI/CD pipelines.
• Ability to influence secure design decisions with developers.

Responsibilities

• Lead and evolve the application security strategy, roadmap, and day-to-day operations.
• Serve as the primary AppSec partner for multiple development teams across web and mobile projects.
• Provide security guidance during design, development, and code review.
• Drive secure coding adoption and threat-modeling across teams.
• Collaborate with DevOps to secure AWS infrastructure and CI/CD workflows.
• Lead security reviews, vulnerability triage, and remediation efforts.

Skills

Secure coding practices

Threat modeling

DevSecOps

CI/CD integration

AWS knowledge

Collaboration with developers

OWASP Top 10

Tools

GitHub Advanced Security

Invicti

Hadrian

AppDome

Cloudflare WAF

CI/CD tooling

Job description

InfraTech Solutions LLC in Chicago is seeking a Senior Application Security Engineer to own and drive our appsec program. You will work hands-on with engineering teams to embed secure development practices and guide security considerations for new features, architectures, and services.

You will lead security tooling and automation, integrate with CI/CD, and collaborate with DevOps to secure AWS infrastructure, ECS, IAM, and container security.