Application Security Engineer
Core
Develop secure software development lifecycle (SSDLC) programs, DevSecOps pipeline integrations, and security assessments of AI-enabled and agentic applications.
Role type
Application Security Engineer (DevSecOps & AI Security)
Builds
Secure CI/CD pipelines, software supply chain controls, and AI security workflows for client organizations.
Domain
Cybersecurity, Application Security, DevSecOps, AI/LLM Security
Required skills
Application security testing (SAST/DAST/SCA), DevSecOps automation, Secure code review, Threat modeling, Software supply chain security, Cloud security (AWS/Azure/GCP), Container security (Docker/Kubernetes), IaC security (Terraform/CloudFormation), AI tooling integration, Vulnerability management, Remediation guidance
Preferred skills
Invicti, Checkmarx, Snyk, Veracode, Black Duck, Semgrep, GitHub Advanced Security, Agentic AI workflow automation, SLSA, Sigstore, Checkov, Trivy, Wiz, STRIDE, OWASP SAMM/BSIMM/NIST SSDF, Security certifications (GWAPT/OSWE/OSCP/CSSLP/CDP/AWS Security Specialty)
Technologies
GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Burp Suite Pro, Jira, ServiceNow, Python, Bash, PowerShell, JavaScript/TypeScript, Java, C#, Go, PHP, C/C++, Docker, Kubernetes, Terraform, CloudFormation, AWS, Azure, GCP
Responsibilities
Run and tune SAST, DAST, SCA, secrets, and IaC scanning tools; triage results and deliver remediation guidance. Design and implement security tool integrations into CI/CD pipelines, source control, IDEs, and ticketing systems. Partner with development teams on remediation, secure coding guidance, and developer enablement. Assess and harden software supply chain controls including SBOM generation, dependency scanning, and artifact signing. Perform threat modeling and security architecture reviews for cloud-native, microservice, and container environments. Leverage AI-assisted tooling to accelerate testing and advise on secure AI adoption. Produce client-ready deliverables and present findings to technical and executive audiences.
Seniority
Mid-level, hands-on IC
