Apply Now

Application Security Engineer

Hybrid in Charlotte, NC, US • Posted 11 hours ago • Updated 11 hours ago

Contract W2

6 Months

No Travel Required

Hybrid

$65 - $70/hr

Code Repo

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

🔢 Crunching numbers...

Job Details

Skills

("Application Security" OR AppSec OR "Product Security" OR DevSecOps) AND (SAST OR SCA OR "Static Application Security Testing" OR "Software Composition Analysis") AND (Snyk OR Semgrep OR Checkmarx OR Veracode OR "GitHub Advanced Security") AND ("Secrets Scanning" OR "Secret Scanning" OR "Container Security" OR "IaC Security" OR "Infrastructure as Code") AND (Python OR "REST API" OR Scripting OR Automation) AND (CI/CD OR Jenkins OR "GitHub Actions" OR GitLab OR "Azure DevOps") AND (OWASP OR "OWASP Top 10") AND ("Threat Modeling" OR STRIDE OR PASTA) AND ("Software Supply Chain" OR "Supply Chain Security" OR "Dependency Security")

("Application Security" OR AppSec OR "Product Security" OR DevSecOps) AND (SAST OR SCA OR "Static Application Security Testing" OR "Software Composition Analysis") AND (Snyk OR Semgrep OR Checkmarx OR Veracode OR "GitHub Advanced Security") AND ("Secrets Scanning" OR "Secret Scanning" OR "Container Security" OR "IaC Security" OR "Infrastructure as Code") AND (Python OR "REST API" OR Scripting OR Automation) AND (CI/CD OR Jenkins OR "GitHub Actions" OR GitLab OR "Azure DevOps") AND (OWASP OR "OWASP Top 10") AND ("Threat Modeling" OR STRIDE OR PASTA) AND ("Software Supply Chain" OR "Supply Chain Security" OR "Dependency Security")

Summary

Job Title: Application Security Engineer

Location: New York, NY, USA or Charlotte, NC, USA
Work Arrangement: Hybrid – 3 Days/Week Onsite
Duration: Contract-to-Hire
Experience: 7+ Years

Job Summary

We are seeking an experienced Application Security Engineer to support and strengthen an enterprise Application Security program across multiple business units.

The ideal candidate will have strong hands-on experience with SAST, SCA, secrets scanning, container/IaC security, DevSecOps, CI/CD, threat modeling, and security automation. This role requires both strong technical skills and the ability to collaborate with development and engineering teams to integrate security into the software development lifecycle.

Responsibilities

Perform application discovery, inventory, ownership mapping, technology profiling, and risk assessment across multiple business units.
Deploy, configure, and manage modern Application Security tools, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Integrate security tools and security gates into CI/CD pipelines.
Develop automated and AI-assisted vulnerability triage workflows to reduce false positives and improve remediation.
Define and implement Secure SDLC requirements, security standards, and development practices.
Conduct threat modeling using STRIDE, PASTA, or similar methodologies.
Partner with application development and engineering teams to drive adoption of security practices.
Evaluate emerging AI security technologies, including AI code review, agentic security testing, and automated security requirements.
Build security automation and integrations using Python, scripting, and REST APIs.
Develop security metrics and executive-level reporting related to application risk.
Identify and address application, dependency, software supply-chain, container, and infrastructure-as-code security risks.

Required Qualifications

7+ years of experience in Application Security, Product Security, or Security Engineering.
3+ years of experience working across multiple business units, products, brands, or engineering organizations.
Hands-on experience with modern AppSec tools such as Semgrep, Snyk, Checkmarx, Veracode, Apiiro, Ox Security, or GitHub Advanced Security.
Strong experience with SAST, SCA, secrets scanning, container security, and IaC scanning.
Experience integrating security tooling into GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar CI/CD platforms.
Strong programming/code-level experience with at least 3 languages, such as Python, Java, JavaScript/TypeScript, C#, or Go.
Strong Python or scripting experience for security automation.
Experience working with REST APIs and automation integrations.
Strong understanding of OWASP Top 10 and modern application security vulnerabilities.
Practical experience with threat modeling methodologies such as STRIDE or PASTA.
Understanding of software supply-chain security and dependency risks.
Strong communication, collaboration, and stakeholder-management skills.
Ability to influence engineering teams and drive security adoption without direct authority.
Willingness to work onsite 3 days per week in either New York, NY or Charlotte, NC.

Preferred Qualifications

Experience integrating LLM/AI technologies into security workflows.
Experience with AI-assisted vulnerability triage, finding summarization, or automated remediation guidance.
Knowledge of NIST AI RMF, SOC 2, HIPAA, or HITRUST.
Experience working in regulated or healthcare-related environments.
Cloud security experience with AWS, Azure, or GCP.
Contributions to open-source security projects, security research, conference presentations, or AppSec detection/rule development.

Key Skills

Work Arrangement

Hybrid – 3 Days/Week Onsite

Location: New York, NY, USA or Charlotte, NC, USA

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91141590
Position Id: 9094044
Posted 11 hours ago

Company Info

About Code Repo

CodeRepo is a premier and award-winning Staffing, recruitment, and IT development company headquartered in Georgia, USA committed to connecting top-tier talent with leading organizations. With a focus on delivering innovative staffing solutions, we have established ourselves as a leading Staffing partner in the ever-evolving Industry landscape. As a trusted partner to both businesses and professionals, we are dedicated to bridging the gap between talent and opportunity in the dynamic world of staffing.

Our mission is to be the industry’s foremost catalyst for success, connecting the most exceptional professionals with organizations that share our commitment to excellence. We envision a future where talent seamlessly finds its perfect fit, and together, they achieve remarkable results. Our goal is to drive positive change in the world of work by creating opportunities that empower individuals, elevate organizations, and enrich lives.

Go to company profile

Contact the job poster

Alex Norman

Recruiter @ Code Repo

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Hybrid in Charlotte, North Carolina

•

3d ago

Job Title: Security Engineer / Application Security Engineer Location: Hybrid at 300 W 57th, New York NY 3540 Toringdon Way, Charlotte NC Mode of Hire: Contract to hire Cybersecurity Organization is seeking an Application Security Engineer. This role will be an integral component of the application security program end-to-end from discovery and inventory of business unit applications, through tooling implementation, through embedding security and AI-assisted controls into business unit DevOps pi

Easy Apply

Third Party, Contract

$60 - $65

Search all similar jobs

More jobs at Code Repo in Charlotte, NC