Sr Application Security Engineer

Role: Sr Application Security Engineer Duration: 12 Months – extension is possible Location – Southlake, TX / Omaha, NE / Orlando, FL – On‑site 4 days per week The Application Security team, operating under the leadership of the Chief Information Security Officer (CISO), is responsible for protecting information assets in support of business objectives and in alignment with corporate policies. As a core function within Cybersecurity Services, the team leads the establishment and ongoing evolution of a Secure Software Development Program, including the creation and implementation of software security policies and best practices, providing security architecture guidance, conducting software security scanning and penetration testing, and educating developers and testers on secure coding practices. Responsibilities The Software Security Engineer plays a key role in safeguarding software assets by strengthening the development process, enhancing security controls, and reducing defects and vulnerabilities in production environments. Qualifications Well qualified candidates for this position will demonstrate the following key traits: Prior engineering experience within a Software Security Assurance or Application Security team and a proven ability to partner effectively with development teams to balance security requirements with innovation. Strong analytical skills, including the ability to interpret large volumes of distributed data and translate it into clear, actionable insights. Experience working with a range of application security tools, including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and secrets management solutions. Solid application engineering experience and a strong understanding of common application vulnerabilities, attack vectors, and remediation strategies. Familiarity with secure software design principles and industry best practices for integrating security into the software development lifecycle. Experience with application security testing tools and their integration into agile development environments. Familiarity with recognized industry frameworks and standards such as OWASP, CIS, and NIST. A minimum of two years of experience working with static analysis or threat modeling tools. Experience implementing and scaling enterprise application security tools, services, and controls. A strong understanding of secure coding practices, code review processes, threat modeling, security requirements analysis, and architectural risk assessment. #J-18808-Ljbffr Spectraforce Technologies