Senior Application Security Engineer

Role Summary

We are seeking a Senior Application Security Engineer to lead and enhance Static Application Security Testing (SAST) capabilities for modern applications, including AI/ML and LLM-based systems. This role focuses on integrating Checkmarx / Checkmarx ONE with Corgea AI, strengthening CI/CD pipelines through automation, and applying AI/ML techniques to improve security detection and remediation.

The ideal candidate brings a strong foundation in application security, combined with hands-on AI/ML development experience, and thrives in a collaborative DevSecOps environment.

Key Responsibilities

• Develop, implement, and maintain SAST strategies for traditional, cloud-native, and AI/ML-based applications
• Customize and integrate Checkmarx and Checkmarx ONE with Corgea AI to enable AI-driven vulnerability detection and remediation
• Automate security testing and embed SAST into CI/CD pipelines (DevSecOps)
• Enhance security workflows using AI/ML and LLM-based models, including generative AI and automated remediation techniques
• Provide hands-on technical support for Checkmarx platforms, including troubleshooting, configuration, and optimization
• Support patching, upgrades, and regression testing of application security tools
• Work with vendors to drive accountability and resolution of product defects
• Collaborate closely with Product Owners, Application Security Champions, development teams, and offshore partners
• Ensure all documentation is current, accurate, and reflects process or integration changes
• Promote secure coding practices and continuous security improvement across teams

Required Qualifications

• 5 10 years of total professional experience
• 4+ years of hands-on Application Security experience
• 3+ years of AI/ML development experience, including frameworks such as TensorFlow or PyTorch
• 2+ years of experience with Generative AI models, reinforcement learning, or automated code remediation solutions
• Strong understanding of OWASP Top 10 and secure coding best practices
• Experience integrating security tools into CI/CD pipelines (Jenkins, GitHub, GitLab, Azure DevOps, etc.)
• 2+ years working in Agile environments, using tools such as Jira and Confluence
• Strong Python scripting skills
• Excellent verbal, written, and interpersonal communication skills
• Proven ability to troubleshoot complex technology and security integrations

Preferred / Nice-to-Have Skills

• 1+ year of experience with Corgea AI
• 2+ years of cloud experience (AWS, Azure, or Google Cloud Platform)
• 2+ years of SQL experience
• Experience supporting enterprise-scale security tools and large development organizations
• Prior experience working with distributed or offshore teams