Senior Principal AppSec Engineer

your Jared; Northern (KY); Hybrid; USD 172,000 - 240,000; Full time

Job summary

CDW is seeking a Principal Application Security Engineer to lead secure coding, threat modeling, and design assessments across applications and APIs. You will drive secure controls within CI/CD pipelines and partner with engineers, SRE, and DevOps to reduce risk while enabling delivery.

You will guide security standards, reference architectures, and playbooks, while embedding security into software development. AI security and cloud-native controls are a plus in this role.

Qualifications

• 10+ years of Application Security Engineering experience.
• Hands-on security in software design, development, and delivery.
• Strong knowledge of authentication/authorization, API security, and OWASP Top 10.
• Experience with secure development across CI/CD pipelines and engineering platforms.
• Experience with cloud-native distributed systems in Azure/AWS/GCP.
• Experience securing AI-enabled applications is a plus.
• Ability to influence engineers and senior stakeholders.
• Experience defining secure standards and reference architectures.

Responsibilities

• Lead secure code reviews, threat modeling, and secure design assessments for applications/APIs.
• Drive design, integration, and improvement of application security controls across CI/CD platforms.
• Identify control gaps and drive remediation through automation and platform improvements.
• Define and promote secure coding standards, playbooks, and tooling.
• Partner with engineering to embed security into software builds and deployments.
• Advance security for AI-enabled development with guardrails and responsible AI usage.
• Provide expertise in API security, authentication/authorization, monitoring, and secure integration patterns.
• Collaborate with web/platform teams to deploy and tune application-layer protections (WAF).

Skills

Secure coding

Threat modeling

Code reviews

CI/CD security

SAST/DAST/SCA

IaC security

SBOM

AI security

Cloud security (Azure/AWS/GCP)

Security metrics

Security champion mindset

Influencing across teams

Tools

Akamai protections

Terraform

CI/CD tooling

WAF tuning

Job description

CDW is seeking a Principal Application Security Engineer to lead secure coding, threat modeling, and design assessments across applications and APIs. You will drive secure controls within CI/CD pipelines and partner with engineers, SRE, and DevOps to reduce risk while enabling delivery.

You will guide security standards, reference architectures, and playbooks, while embedding security into software development. AI security and cloud-native controls are a plus in this role.