Senior Security Engineer - Application Security

TechAviv; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

TechAviv is seeking a security-focused professional to lead development and implementation of application security across the full software development lifecycle in a fast-paced environment. You will collaborate with engineering to integrate security into architecture and perform hands-on testing of web apps, APIs, and cloud services.

Requirements include 4+ years in application security, deep OWASP Top 10 and API risk knowledge, and cloud expertise (AWS, GCP, or Azure), with proven CI/CD tool

Qualifications

• Requires 4+ years of professional experience in application or software security.
• Strong knowledge of OWASP Top 10 and API risks.
• Expertise in cloud technologies (AWS, GCP, or Azure).
• Experience integrating security tools into CI/CD workflows.

Responsibilities

• Lead the development and implementation of application security protocols throughout the software development lifecycle.
• Partner with engineering teams to integrate security into architecture and perform hands-on testing of web applications, APIs, and cloud services.

Skills

Application Security

Cloud Security

SDLC

Security Testing

CI/CD Pipelines

OWASP Top 10

API Security

SAST

DAST

Container Security

Infrastructure-as-Code Scanning

Cryptography

AWS

GCP

Azure

HIPAA Compliance

Tools

SAST

DAST

IaC Scanning

Job description

Lead the development and implementation of application security protocols throughout the entire software development lifecycle. Partner with engineering teams to integrate security into architecture and perform hands‑on testing of web applications, APIs, and cloud services.

Requirements: Requires 4+ years of professional experience in application or software security, with strong knowledge of OWASP Top 10 and API risks. Candidates must have expertise in cloud technologies (AWS, GCP, or Azure) and experience integrating security tools into CI/CD workflows.

Key Skills: Application Security, Cloud Security, SDLC, Security Testing, CI/CD Pipelines, OWASP Top 10, API Security, Static Analysis (SAST), Dynamic Analysis (DAST), Container Security, Infrastructure-as-Code Scanning, Cryptography, AWS, GCP, Azure, HIPAA Compliance