Senior Application Security Engineer

Senior Application Security EngineerThe client is looking for a strong Senior Application Security Engineer with DevSecOps Team Lead-level experience.Priority skills:Application Security (required)Software Development experience (super beneficial)DevSecOps experience (super beneficial)Working Arrangement:3-days onsite/2-day offsiteReporting Location:Houston, TX (1501 McKinney St, Houston TX 77010 I believe)Duration:Default to end of 2027 (will gather more info on this)Role OverviewWe are seeking a Senior Application Security Engineer to help secure our software development lifecycle by leveraging traditional SAST/DAST tools and leveraging AI-enabled tools to identify and remediate code vulnerabilities. This role partners closely with development, DevOps, and security teams to drive secure coding practices and improve application risk posture at scale. Uses AI-driven tools to improve vulnerability detection accuracy, automate code review, and accelerate remediation across the software lifecycle.Key ResponsibilitiesEmbed application security into the SDLC, CI/CD pipelines, and developer workflowsPerform and oversee SAST, DAST, SCA, and API security testingLeverage AI-based code scanning tools to enhance vulnerability detection, reduce false positives, and accelerate remediationPartner with developers to remediate vulnerabilities and improve secure coding practicesConduct threat modeling and security reviews for applications and APIsTrack and report security metrics (e.g., vulnerability trends, remediation timelines)AI-Based Code Scanning & Intelligent Security AutomationImplement and manage AI-powered code scanning solutions to analyze source code, APIs, and dependencies for security vulnerabilities across the SDLCLeverage AI/ML capabilities to identify complex vulnerability patterns, insecure coding practices, and hidden attack paths that traditional tools may missUse AI to reduce false positives, improve signal-to-noise ratio, and enable more efficient triage of security findingsApply AI-assisted insights to perform root cause analysis and provide developers with actionable, context-aware remediation guidanceIntegrate AI-enabled security scanning into CI/CD pipelines to provide real-time feedback during development and code commitsEvaluate and optimize AI models and rulesets to improve detection accuracy and alignment with enterprise risk prioritiesPartner with engineering teams to embed AI-assisted code review and secure coding recommendations into developer workflows (e.g., pull requests, IDE plugins)Monitor and measure the effectiveness of AI-based scanning through metrics such as detection rates, false positive reduction, and remediation speedStay current on emerging AI security tools, LLM-based code analysis, and automated remediation technologies, and drive adoption where they add valueRequired Qualifications7+ years of experience in application security, DevSecOps, or secure software engineeringStrong knowledge of OWASP Top 10 and secure coding practicesExperience with application security tools (e.g., SAST, DAST, SCA)Experience integrating security into CI/CD pipelinesKnowledge of Ghazdo and GitHub Advance securityProficiency in at least one programming language (e.g., Python, Java, JavaScript) Anveta