Application Security Engineer
Core
Run client SAST, DAST, and SCA tools, review outputs, and provide recommendations to mitigate application security risks.
Role type
Application Security Engineer (IC)
Builds
Secure software delivery pipelines and remediated web applications
Domain
Cybersecurity / Application Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
SAST/DAST/SCA tool operation, CI/CD integration, web application security principles, source code review (JavaScript, Python, Java, C++, PHP, C#), vulnerability remediation, secure development lifecycles
Preferred skills
Prior software development experience, familiarity with AI tools for security workflows
Technologies
Checkmarx, Veracode, Synk, Invicti, Semgrep, Blackduck, Burp Suite Pro, GitHub, Azure DevOps, Jenkins, Bamboo
Responsibilities
Run client SAST, DAST, and SCA tools and review outputs; Implement integrations for security tools into pipelines and ticketing systems; Collaborate with developers to provide secure design guidance and remediation strategies; Manage, maintain, and operate application security tooling including configuration, tuning, and automation
Seniority
Mid-level, hands-on IC