Application Security Engineer (SSDLC Workstream)

Our client is seeking an Application Security Engineer to lead the adoption of a secure software development lifecycle (S-SDLC) framework across North American development teams. This role combines hands-on security tool expertise with mentorship and cross-functional collaboration with global headquarters teams.

Responsibilities & Qualifications

• Help AMER development teams adopt and implement the headquarters-designed S-SDLC framework, with a focus on Checkmarx integration and best practices
• Mentor and support junior security engineers and developers in application security concepts and tool usage
• Conduct training sessions and workshops to build developer security awareness and remediation capabilities across the organization
• Manage vulnerability remediation workflows, including false-positive tuning and prioritization of security findings
• Track and report on security KPIs and KRIs to measure S-SDLC program effectiveness
• Collaborate with headquarters teams in Paris and Porto to align on security standards and tooling strategies
• Develop and maintain documentation for S-SDLC processes, tool configurations, and remediation guidelines

Requirements

• 5-8 years of application security or software security engineering experience
• Hands-on expertise with SAST, SCA, DAST, container image scanning, IaC scanning, and secrets detection tools
• Demonstrated experience with Checkmarx or similar SAST platforms
• Strong understanding of OWASP Top 10 vulnerabilities and secure coding practices
• Proficiency in at least two of the following programming languages: Python, C++, or C#
• Experience integrating security tools into CI/CD pipelines and DevOps workflows
• Familiarity with cloud security concepts and containerized application security