Senior Application Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Application Security Engineer based in the United States. This role offers the opportunity to strengthen application security across a modern enterprise software platform by embedding security throughout the software development lifecycle. You will work closely with engineering teams to identify vulnerabilities, improve secure coding practices, and design resilient solutions. The position combines hands-on security testing, architecture reviews, threat modeling, and collaboration with cross-functional stakeholders. You will contribute to building security tools, improving development processes, and protecting customers through proactive risk management. The ideal candidate brings deep application security expertise, strong technical judgment, and the ability to communicate complex concepts clearly. This is an impactful opportunity for a security professional who enjoys solving complex challenges in a remote, collaborative environment. \n

Accountabilities: The Senior Application Security Engineer will play a key role in protecting applications by integrating security practices into development workflows, identifying risks, and guiding teams toward secure solutions. This role requires strong technical expertise, proactive problem-solving, and effective collaboration across engineering and security teams. Key responsibilities include: Perform manual and automated application security testing to identify vulnerabilities across enterprise software applications. Conduct source code reviews and security assessments to evaluate application security risks and provide remediation recommendations. Analyze software development lifecycle processes to identify opportunities for improving application and supply chain security. Partner with engineering teams to integrate security practices into application development, workflows, and product design. Perform threat modeling activities and translate findings into actionable security improvements. Conduct penetration testing and validate vulnerabilities through proof-of-concept demonstrations when needed. Review application architecture and provide secure-by-design recommendations for new features and systems. Design, develop, and maintain custom security testing tools and scanning capabilities. Define, document, and enforce secure coding standards, policies, and procedures. Collaborate with security teams to identify attack patterns, indicators of compromise, and emerging threats. Provide mentorship and technical guidance to junior security professionals. Communicate security findings, risks, and recommendations effectively to both technical and non-technical stakeholders. Requirements: The ideal candidate is an experienced application security professional with strong knowledge of secure software development, vulnerability management, and offensive security practices. They should demonstrate excellent analytical skills, technical expertise, and the ability to collaborate effectively with diverse teams. Qualifications include: Bachelor’s degree in Computer Science, Engineering, or a related technical field with 8+ years of experience in application security testing, penetration testing, or software development; or equivalent combinations of education and experience. Master’s degree with 3+ years of relevant experience or Associate degree with 12+ years of relevant experience will also be considered. 3+ years of hands-on experience conducting application threat modeling and translating findings into remediation strategies. Strong experience with secure coding practices, application security testing, and software security assessments. Hands-on experience with C# and .NET development environments, including code review and security analysis. Experience performing web application penetration testing and vulnerability validation. Knowledge of reverse engineering or decompiling .NET libraries is preferred. Familiarity with security frameworks, compliance standards, and risk management practices such as SOC 2 and FedRAMP. Experience with offensive security certifications such as OSCP, GXPN, GPEN, or equivalent credentials is preferred. Strong written and verbal communication skills with the ability to explain complex security concepts clearly. Excellent organizational skills, analytical thinking, and the ability to manage multiple priorities in fast-paced environments. Ability to work independently, exercise sound judgment, and collaborate with stakeholders at all organizational levels. Benefits: The company offers a competitive compensation package and benefits designed to support employee well-being, career growth, and long-term success, including: Annual base salary range of $150,000 - $196,000 USD, with additional variable compensation and benefits potentially available based on experience, skills, and location. Remote work opportunity within the United States. Comprehensive medical insurance. Dental and vision coverage. Life insurance. Short-term and long-term disability coverage. Retirement plan benefits. Paid vacation time and holidays. Professional development and training opportunities. Access to diverse technical projects and opportunities to grow security expertise. Collaborative culture focused on customer success, innovation, and continuous learning.

\n How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1