Application Security Engineer

Job Title: Application Security Engineer

Direct Hire: Must be authorized to work in the United States now and in the future without assistance.

Pay: $115,000–$140,000 annually, plus a 16% target bonus

Work Schedule: Full-time. Onsite 3 times a week.

Benefits: This position is eligible for medical, dental, vision, and 401(k).

Join a security team working to strengthen application testing, expand automation, and improve incident response capabilities. This role requires a hands-on professional who can assess application risks, embed security checks into development workflows, and help refine operational practices.

The anticipated scope includes approximately 40% application security, 40% digital forensics and incident response, and 20% vulnerability management.

Key Responsibilities:

• Incorporate application scanning tools into CI/CD workflows to support automated, repeatable security testing.
• Analyze scan results, validate potential weaknesses, and conduct additional hands-on application assessments.
• Partner with engineering teams to prioritize security findings and guide corrective action.
• Investigate security events and contribute to forensic examinations, incident containment, and recovery efforts.
• Evaluate vulnerabilities, determine their potential impact, and support remediation activities.
• Improve testing procedures and operational workflows as the security program evolves.
• Apply established security frameworks to maintain consistent assessments across applications.
• Contribute to emerging initiatives involving AI security testing and AI harness development.

Qualifications:

• At least five years of relevant professional experience; seven or more years preferred.
• Practical experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Working knowledge of the OWASP Top 10 and structured application security testing methods.
• Understanding of confidentiality, integrity, and availability—the foundational principles of the CIA triad.
• Experience adding security testing and automation to CI/CD pipelines.
• Ability to explain technical findings and collaborate with software engineering and security teams.
• Demonstrated ability to improve processes and work independently through technical challenges.
• Exposure to digital forensics, incident response, and vulnerability management is valuable.
• Experience or interest in AI security testing and harness development is a plus.
• No degree is required. Relevant hands-on experience and certifications will be considered.