Application Security Engineer (SAST/DAST) - Hybrid Onsite (Multiple Hires)

We are hiring experienced Application Security Engineers for a long-term consulting engagement with a leading technology services firm. You will work onsite with enterprise stakeholders and oversee offshore AppSec testing teams. This role is ideal for engineers who excel in cloud and on-prem security testing, can manage workstreams, and thrive in a client-facing environment.

Key Responsibilities:

• Conduct application security assessments using SAST and DAST methodologies

• Use tools such as Burp Suite, Checkmarx, SNYK, and Veracode

• Evaluate and test security for cloud-native and on-prem applications, primarily in AWS

• Collaborate with and manage deliverables from offshore AppSec teams

• Prioritize workstreams, enforce quality standards, and communicate status with client-side stakeholders

Required Skills:

• 9+ years of hands-on experience in Application Security

• Proficiency with both dynamic and static analysis tools

• Experience securing applications in AWS environments

• Leadership experience working with offshore delivery teams

• Strong communication and client-facing skills

Nice to Have:

• Experience in regulated environments (e.g., HIPAA)

• Security certifications (e.g., OSWE, CSSLP, GIAC)

Engagement Details:

• Schedule: 4 days per week onsite in Indian River, CA

• Duration: Long-term engagement

• Work Authorization: Sponsorship is not available for this role