Senior Vulnerability & App Security Engineer (Remote)

PSI Services LLC; United States; On-site; USD 106,000 - 144,000; Full time

Benefits offered by this job

401(k) plan

Pension/retirement

Generous PTO

Medical insurance

FSA benefits

Employee Assistance Program

Volunteer day

Wellness program

Job summary

PSI Services LLC is seeking a Vulnerability Mgmt. and Application Security Manager to lead enterprise threat, vulnerability, and AppSec across the SDLC. The role partners with engineering, platform, and product teams to embed security early and drive measurable risk reduction.

You will own and evolve the AppSec program, oversee SAST/DAST/SCA, and communicate security posture to executives with clear, prioritized actions. This is a Remote-US role.

Qualifications

• Strong understanding of information security risk measurement to support prioritization.
• Working knowledge of security frameworks (NIST CSF/800-53, ISO 27001, OWASP).
• Ability to correlate threat intel with vulnerability and application risk.

Responsibilities

• Drive vulnerability management improvements using automation and data-driven insights.
• Collaborate with engineering and product teams to embed security earlier in the SDLC.
• Evaluate and recommend vulnerability management tools for effectiveness and efficiency.
• Develop metrics and KPIs and present to executive leadership and stakeholders.
• Provide security guidance to support secure development and remediation.
• Oversee application security assessments (SAST/DAST/SCA) and reviews.

Skills

Threat intel correlation

Vulnerability management

Application security

SAST/DAST/SCA

CI/CD security

OWASP Top 10

Threat modeling

Authentication/Authorization security

Tools

Qualys

Tenable

CrowdStrike

Job description

PSI Services LLC is seeking a Vulnerability Mgmt. and Application Security Manager to lead enterprise threat, vulnerability, and AppSec across the SDLC. The role partners with engineering, platform, and product teams to embed security early and drive measurable risk reduction.

You will own and evolve the AppSec program, oversee SAST/DAST/SCA, and communicate security posture to executives with clear, prioritized actions. This is a Remote-US role.