Lead Application Security Engineer

Job Reference: 6145

We're partnering with an established financial services organization looking for a hands-on application security engineer to strengthen DevSecOps and software assurance. You'll help secure development pipelines and assess the trustworthiness of internally developed and third-party applications.

What we're looking for

• Proven application security or DevSecOps experience, with secure SDLC, threat modeling and vulnerability remediation expertise.
• Hands-on GitHub Advanced Security, including secret scanning, push protection and security automation within CI/CD pipelines.
• Practical SAST, DAST and code-review experience, using tools such as CodeQL, Dependabot and OWASP ZAP.
• Experience assessing third-party software, dependencies or compiled binaries, with knowledge of software supply chain security.
• Ability to coordinate penetration testing, assess API security and use threat intelligence to inform software risk decisions.

Why consider this opportunity?

You'll influence how software is developed, assessed and approved for enterprise use, working closely with engineering teams. The scope combines pipeline security with deeper software analysis and continuous validation of application trust.

Location: Pasadena, CA.
Salary: $120,000–$180,000 base per year.
US work authorization is required. Visa sponsorship is unavailable.

Tiro Security is a specialist cybersecurity staffing and professional services company founded in 2012. Cybersecurity is ALL we do.

Tiro Security is a specialist in Cyber Security staffing and professional services company. Formed in 2012, headquartered on the West Coast and helping clients all over the USA, Cyber Security is ALL we do. Tiro Security is extremely active in the cybersecurity industry and regularly speaks as experts on staffing, careers, and retaining talent at major conferences including DEFCON, ISC2 Congress, ShellCon, BSides, and RSA