Application Security Engineer - Northeast region
Core
Application Security Engineer delivering engineering services to clients, implementing and tuning SAST tooling, integrating security controls into CI/CD pipelines, and adopting secure development practices across the SDLC.
Role type
Senior IC application security engineer (DevSecOps)
Builds
Automated security testing capabilities, custom detection rules, and secure pipeline patterns
Domain
Cybersecurity, Application Security, DevSecOps
Required skills
SAST tool implementation and troubleshooting, CI/CD pipeline integration, software engineering, scripting and automation, application security fundamentals, threat modeling, secure coding practices
Preferred skills
Custom SAST rule authoring, IAST/DAST/API security tool familiarity, vulnerability triage with Burp Suite, secure development lifecycle experience
Technologies
Semgrep, Snyk, CodeQL, Checkmarx, Veracode, GitHub Actions, GitLab Runners, Azure DevOps, Jenkins, CircleCI, Burp Suite
Responsibilities
Implement, operationalize, and troubleshoot SAST platforms; Design and integrate automated security testing into CI/CD pipelines; Author and adapt custom SAST rules; Advise client development teams on OWASP Top 10 and secure coding practices; Leverage AI-assisted tooling for rule development and remediation; Contribute to reusable pipeline patterns and delivery accelerators
Seniority
Senior, hands-on IC
