Application Security Engineer
Core
Senior Application Security Engineer leading an AppSec scrum team to integrate security into the development lifecycle for US federal government clients.
Role type
Senior IC Application Security Engineer (Team Lead)
Builds
Secure CI/CD pipelines, hardened build processes, and secure supply chain practices for web and AI applications.
Domain
US Federal Government / Application Security / DevSecOps
Deliverable
production ML models | infrastructure
Required skills
Application security, CI/CD pipeline security, threat modeling, secrets management, SBOM management, build systems (Gradle, Maven, Docker/Kubernetes), dependency lifecycle management, AI security principles
Preferred skills
Artifact signing (Sigstore/Cosign), AI agent security, using AI tools for workflow efficiency
Technologies
GitLab, Jenkins, Snyk, Nexus, JFrog, CycloneDX, SPDX, Sigstore, Cosign
Responsibilities
Lead the AppSec scrum team and agile ceremonies; Test and triage security vulnerabilities for web and AI applications; Architect and maintain secure CI/CD pipelines; Lead shift-left threat modeling; Integrate security tools into developer workflows; Balance security needs with delivery velocity.
Seniority
Senior, hands-on IC with team leadership
