Cybersecurity Engineer

Application Security Engineer

Payrate: $75.00 - $78.00/hr. Summary: This role involves defining, executing, and continuously improving application security processes and standards to ensure security activities are embedded throughout the Software Development Life Cycle (SDLC). The position requires performing AI-assisted and traditional security assessments of applications, APIs, cloud workloads, repositories, and supporting infrastructure using approved security testing methodologies and tools. The candidate will also be responsible for driving remediation efforts, developing security metrics, and collaborating with various stakeholders to achieve security objectives.

Responsibilities

• Define and improve application security processes, standards, and workflows.
• Perform AI-assisted and traditional security assessments of applications and supporting infrastructure.
• Execute and manage security scanning activities across repositories.
• Analyze, validate, prioritize, and triage security findings.
• Drive remediation efforts from discovery through closure.
• Identify and reduce security debt and software supply chain exposure.
• Develop security metrics, coverage reporting, and executive dashboards.
• Leverage AI securely to accelerate security analysis and operational efficiency.
• Perform manual validation and security testing using industry-standard tools.
• Apply understanding of OWASP Top 10, secure coding principles, and common attack techniques.
• Support remediation implementation with code fixes and infrastructure updates.
• Collaborate with architects, developers, and stakeholders to communicate risks and drive security outcomes.
• Maintain Agile work items and operate within Scrum delivery processes.
• Stay current with emerging threats and industry best practices.
• Champion a security-first culture through coaching and knowledge-sharing sessions.

Qualifications

• Bachelor's and/or Master's degree in Computer Science, Cybersecurity, Information Systems, or related field, or equivalent practical experience.
• 5-7 years of hands-on application security / DevSecOps experience.
• Secure SDLC, DevSecOps, Agile, and Scrum methodologies.
• Security tooling: Burp Suite, GitHub Advanced Security, CodeQL, SAST, SCA, secret scanning, dependency analysis, and CI/CD security tooling.
• Ability to read, analyze, test, and modify production application code in Java and Python.
• Understanding of OWASP Top 10, API Security Top 10, and secure coding principles.
• Cloud security and modern application architectures.
• Safe and effective use of AI-assisted development and security tools.
• Vulnerability triage and validation skills.
• Development of security metrics and executive dashboards.

Skills

• Excellent communication, stakeholder management, and documentation skills.
• Ability to work independently across multiple applications and teams.
• Strong problem-solving mindset balancing security and business objectives.
• Collaboration and influence skills for negotiating priorities and removing blockers.
• Coaching and knowledge sharing to champion a security-first culture.
• Comfortable operating within Scrum/Agile delivery and managing own work items.

Pay Transparency: The typical base pay for this role across the U.S. is: $75.00 - $78.00 /hour. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match, life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus. Sick leave and mobile phone reimbursement provided based on state or local law.