Senior Application Security Engineer

Application Security Contract

Charlotte, NC (Hybrid)

Long-Term Contract

Must have : App Security, App Development, Risk, Vulnerability

Job Description:

Key Responsibilities

- Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.

- Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.

- Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.

- Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.

- Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.

- Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.

Required Qualifications

- 12+ years of experience in application security, application development, or related cybersecurity roles.

- Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.

- Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).

- Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.

- Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking.

- Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.