Application Security Engineer

Application Security Engineers partner with software development teams to help build secure applications for Laserfiche’s customers. In this role, you will assist in implementing secure development practices and integrating security tools into the software development lifecycle (SDLC). You will gain hands-on experience with modern application security approaches, including automated testing, vulnerability management, and CI/CD security controls.

This role focuses applying security best practices to identify and reduce risks early in the development process, while collaborating with developers, DevOps, and security team members.

Location

• Hybrid: Three days per week (Tuesday, Wednesday and Thursday) in office in Long Beach, CA.
• Remote work from home on Mondays and Fridays.

About the Role - Key Responsibilities

• Assist in integrating application security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines to help identify vulnerabilities early
• Support engineering teams in remediating common security issues discovered through automated scans and testing
• Participate in basic threat modeling exercises to identify potential risks and recommend mitigations
• Conduct security reviews of code and application designs with guidance from senior team members
• Help track and validate remediation of identified vulnerabilities across applications and services
• Monitor and triage security findings from scanners, bug bounty programs, or internal testing
• Contribute to maintaining documentation for secure coding standards and application security processes
• Stay up to date on common vulnerabilities (e.g., OWASP Top 10) and assist in educating developers on secure coding practices

About You - Essential Qualifications

• Bachelor’s degree in Computer Science, Information Security or higher
• Familiarity with Git-based development workflows and CI/CD pipelines
• Basic knowledge of cloud environments (e.g., AWS, Azure) and container technologies (Docker, Kubernetes)
• Exposure to secure development practices in Agile/DevOps environments
• Experience with security testing tools
• Entry-level certifications such as Security+, eJPT, or similar are a plus
• 1–3 years of experience in software engineering, application security, or related field
• Basic understanding of web application security concepts (e.g., authentication, authorization, input validation, OWASP Top 10)
• Familiarity with at least one programming or scripting language (e.g., Python, JavaScript, C#, Java)
• Exposure to application security tools such as SAST, DAST, or Software Composition Analysis (SCA)
• Strong problem-solving skills and attention to detail
• Effective verbal and written communication skills

The salary range varies, and pay is based on several factors including but not limited to education, certifications (if applicable), candidate’s geographic region, job-related knowledge, skills and years of experience amongst other factors.

Salary range: $108,000 - $140,000

Perks & Benefits at a Glance

Generous time off:

• 15 Days of Vacation
• 3 Floating Holidays
• 2 Paid Volunteer Holidays
• 9 Paid Holidays
• Hybrid Work Environment
• Free Parking: covered and EV charging stations
• Various 401 (k) Investment Options and Generous Company Match
• HMO and PPO Medical Care Options (Employees are fully covered under HMO)

Applicants must be authorized to work for Laserfiche in the United States on a full-time basis without the need for employer sponsorship. We are unable to sponsor new employment visas, or take over sponsorship of existing employment visas, at this time.

Laserfiche is a global leader in intelligent document management and business process automation, dedicated to helping organizations drive digital transformation. Headquartered in Long Beach, California, Laserfiche empowers businesses of all sizes—from dynamic startups to Fortune 500 enterprises—to accelerate productivity, improve collaboration, and deliver exceptional customer experiences.

Through scalable workflows, customizable digital forms, and AI-powered automation, the Laserfiche platform enables teams to simplify complex processes and operate with greater efficiency. Our no-code solutions empower employees to innovate, adapt quickly, and make data-driven decisions that move their organizations forward.

With a strong global presence and offices across North America, Europe, and Asia, Laserfiche is recognized for its commitment to innovation, quality, and customer success. Our people-first culture fosters professional growth, continuous learning, and collaboration—making Laserfiche a place where talented individuals can shape the future of digital enterprise technology.

Learn more about our team here.

Laserfiche complies with all Equal Opportunity and Affirmative Action regulations. Laserfiche makes all employment decisions – such as recruiting, hiring, training, promotion, compensation, professional development practices, discipline and termination – without regard to race, religion, color, national origin, ancestry, citizenship, sex, pregnancy, age, creed, physical or mental disability, medical condition, genetic characteristic, marital status, veteran status, gender identity/expression, sexual orientation or any other characteristic protected by law, except as may be permitted by law.

Laserfiche provides reasonable accommodations for applicants with disabilities upon request. For more information, please contact Talent Acquisition at

or View phone number on workus.org.

Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, and the Los Angeles Fair Chance Initiative for Hiring Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, meet client expectations, standards, and accompanying requirements, and safeguard business operations and company reputation.