Staff Application Security Engineer: Scale Secure SDLC

BetterCloud; Buffalo (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

ACV is seeking an Application Security Engineer to lead the development and maturation of our AppSec program within a fast-paced, cloud-native SaaS environment. You’ll work across engineering, product, and DevOps to ensure secure design, implementation, and deployment of our applications and services.

You will partner with engineering, product, and DevOps to embed security into the software development lifecycle, drive secure-by-default design, and mentor teams on threat modeling, code reviews,

Qualifications

• Experience building or leading an Application Security Program at a tech-driven org.
• Deep knowledge of web/mobile vulnerabilities (OWASP Top 10) and microservices security.
• Cloud-native architectures (preferably AWS) and secure-by-default engineering.
• Hands-on securing CI/CD environments and working with DevOps.
• Industry certifications a plus (e.g., OSWE, GWAPT, CSSLP, CISSP).

Responsibilities

• Design, implement, and scale ACV's Application Security Program aligning with Secure SDLC practices.
• Integrate security tools into CI/CD pipelines (SAST, DAST, SCA, secrets management).
• Conduct and oversee code reviews, security assessments, and pen testing of apps and services.
• Lead threat modeling workshops, security training, and awareness initiatives for developers and architects.
• Develop policies, standards, and automation to support a secure-by-default culture.
• Drive remediation with developers and collaborate with compliance and risk teams for audits.

Skills

AppSec program leadership

Secure SDLC/Shift Left

CI/CD security

SAST/DAST/SCA and secrets

Threat modeling

Code reviews & security assessments

AWS/cloud-native

Security testing tools

OWASP Top 10 knowledge

DevSecOps collaboration

Tools

Burp Suite

GitHub Advanced Security

Snyk

Checkmarx

Job description

ACV is seeking an Application Security Engineer to lead the development and maturation of our AppSec program within a fast-paced, cloud-native SaaS environment. You’ll work across engineering, product, and DevOps to ensure secure design, implementation, and deployment of our applications and services.

You will partner with engineering, product, and DevOps to embed security into the software development lifecycle, drive secure-by-default design, and mentor teams on threat modeling, code reviews,