Application Security Engineer - North Central region
Core
Application Security Engineer developing SSDLC programs, DevSecOps pipelines, and security assessments for AI-enabled applications.
Role type
Application Security Engineer (DevSecOps & AI Security)
Builds
Secure CI/CD pipelines, software supply chain controls, and AI security workflows
Domain
Cybersecurity, Application Security, DevSecOps, AI Security
Deliverable
production ML models
Required skills
SAST/DAST/SCA tool integration, CI/CD pipeline automation, secure code review, threat modeling, cloud-native security, software supply chain security, AI tooling, vulnerability management, secure coding guidance
Preferred skills
Invicti, Checkmarx, Snyk, Veracode, Black Duck, Semgrep, GitHub Advanced Security, agentic AI workflow automation, SLSA, Sigstore, Checkov, Trivy, Wiz, STRIDE, OWASP SAMM, BSIMM, NIST SSDF
Technologies
GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Burp Suite Pro, Docker, Kubernetes, Terraform, CloudFormation, Python, Bash, PowerShell, AWS, Azure, GCP
Responsibilities
Run and tune SAST/DAST/SCA/scanning tools and triage results; Design and implement security tool integrations into CI/CD pipelines; Partner with development teams on remediation and secure coding guidance; Assess and harden software supply chain controls; Perform threat modeling and security architecture reviews; Leverage AI-assisted tooling to accelerate testing and reporting; Help clients mature AppSec programs by defining metrics and roadmaps
Seniority
Mid-level, hands-on IC
