Application Security Engineer - Hybrid

Application Security Engineer

Genesis10 is currently seeking an Application Security Engineer for a hybrid position (3 days onsite) with a Global Financial Institution located in Charlotte, NC, Los Colinas, TX or Chandler, AZ. This is a 12+ month contract opportunity.

This role will consult as an expert to develop and influence initiatives for highly complex business and technical needs across Engineering. The ideal candidate will conduct and automate Application Threat Modeling, decompose application architecture, and drive the implementation of scalable security solutions, including those for AI/LLM environments.

Responsibilities:

• Consult as an expert to develop or influence initiatives and resources for highly complex business and technical needs across Engineering
• Consult on the strategy and resolution of highly complex and unique challenges, delivering long-term, large-scale solutions
• Conduct and automate Application Threat Modeling
• Decompose the architecture of applications to identify security vulnerabilities
• Drive and implement solutions for automation
• Provide expertise to senior leadership on innovative Engineering business solutions

Requirements:

• 7+ years of Engineering experience, or equivalent demonstrated through work or consulting experience, training, military experience, or education
• 7+ years of Application Security Engineering experience
• 2+ years of Threat Modeling experience
• Experience building AI/LLM Application Security scalable solutions for enterprise production environments

Desired Skills:

• Demonstrated deep, hands-on expertise in secure application architecture and design, secure coding practices, and code-level vulnerability analysis
• Experience with threat modeling, abuse case analysis, authentication, authorization, API security, and secrets management
• Knowledge of common application vulnerabilities and exploit patterns (e.g., OWASP Top 10)
• Strong hands-on experience securing applications built in technology stacks such as Java, .NET, Python, JavaScript/TypeScript, or Node.js
• Experience integrating security into CI/CD pipelines, developer workflows, and engineering platforms
• Experience with one or more of the following: SAST, SCA, DAST, IaC scanning, container security, or API security testing
• Hands-on experience with AI security, including securing AI-enabled applications
• Experience designing security controls for cloud-native and distributed systems running in Azure, AWS, or GCP
• Experience with software supply chain security, including dependency risk management and build pipeline hardening
• Background in software engineering or architecture prior to moving into security
• Certifications such as CSSLP, GIAC GWEB, CISSP, GWAPT, or CCSP

Pay range: $86.09 - $94.09 per hour

Only candidates available and ready to work directly as Genesis10 employees will be considered for this position.

If you have the described qualifications and are interested in this exciting opportunity, please apply!