Application Engineer

Title - Sr. Application Security Engineer

Salary - $150,000 - $180,000


DAY TO DAY

• Partner closely with developers throughout the Secure SDLC.


• Integrate and configure AppSec tooling within GitHub/GitHub Actions workflows.


• Work hands-on with SAST, DAST, and SCA tools.


• Configure security scanning, checks, policies, and risk-based gates within developer workflows.


• Review findings, validate vulnerabilities and false positives, prioritize risk, and drive remediation through closure.


• Work directly with developers to troubleshoot vulnerabilities, explain root cause, recommend code-level fixes, and validate remediation.


• Identify AppSec gaps and independently develop technical solutions.


• Support AI-assisted development security, threat modeling, vulnerability triage, and security automation.

MUST HAVES

• 5 7+ years of Cyber Security/IT experience, including 3+ years of recent hands-on Application Security engineering.


• Strong hands-on experience with SAST, DAST, SCA, Secure SDLC, and DevSecOps.


• Hands-on experience integrating and configuring security tooling within GitHub/GitHub Actions and developer workflows.


• Strong vulnerability triage and remediation experience, including validating findings, false positives, prioritizing risk, and driving issues through closure.


• Strong developer-facing AppSec experience, including troubleshooting vulnerabilities, explaining root cause, and recommending code-level fixes.


• Meaningful hands-on AI security experience related to AppSec, AI-assisted development, threat modeling, vulnerability management, or security automation

PLUSSES

• Agentic-code security experience securing AI coding agents, agent-generated code, or agentic development workflows.


• Python scripting/automation personally writing Python to automate AppSec or security processes.


• AI-assisted code review, threat modeling, vulnerability triage, or remediation.


• Built automation around security findings, developer workflows, or vulnerability management.


• GitHub Advanced Security / GitHub-native security tooling experience. Cloud, API, Kubernetes/container, or IaC security experience.

This is a direct hire opportunity. The selected candidate will be employed directly by our client. All compensation and benefits, including but not limited to medical insurance, retirement plans, paid time off, and other perks, will be provided by the client in accordance with their internal policies and subject to applicable laws and eligibility requirements.