Application Security Engineer - Southeast region
Core
Implement, operationalize, and tune SAST platforms; integrate automated security testing into CI/CD pipelines; advise development teams on secure coding and threat modeling.
Role type
Application Security Engineer
Builds
Automated security controls and CI/CD pipeline integrations
Domain
Application Security / DevSecOps
Required skills
SAST tools (Semgrep, Snyk, CodeQL, Checkmarx, Veracode), CI/CD pipeline tools (GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI), scripting/automation, secure coding, OWASP Top 10, threat modeling, vulnerability triage and remediation
Preferred skills
Custom Semgrep/CodeQL rule authoring, IAST/DAST/API security tools, Burp Suite proficiency
Technologies
Semgrep, CodeQL, Snyk, Checkmarx, Veracode, GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, Burp Suite, NoName, Traceable, Salt, Cequence
Responsibilities
Implement and tune SAST platforms in client environments; Integrate automated security testing into CI/CD pipelines; Author and adapt custom Semgrep and CodeQL rules; Triage and validate vulnerabilities; Advise development teams on secure development lifecycle practices; Contribute reusable pipeline patterns and rule libraries
Seniority
Mid-level, hands-on IC