Application Security Engineer; Hands-On Secure Coding

Position: Application Security Engineer (Hands-On Secure Coding)
The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).Regular or Temporary:

Regular Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)
Please review the following job description:

We seek an Application Security Engineer with proven hands-on Secure Coding expertise to design and implement application security capabilities across the software development lifecycle, including secure development, security scanning, testing, and vulnerability management. Builds and enhances scalable, reliable, and secure technology solutions by analyzing trends, establishing security baselines, and preparing for future requirements. Collaborates closely with developers, Dev Ops engineers, and security teams to identify, assess, and remediate security vulnerabilities across diverse technologies and platforms.

ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

Designs and implements application security solutions to protect critical assets and support secure software development.

Analyzes, prioritizes, and tracks remediation of vulnerabilities identified through security scanning tools.

Partners with development and Dev Ops teams to promote secure coding practices and integrate security controls into CI/CD pipelines.

Supports security testing, control validation, audits, compliance activities, and evidence collection.

Develops and maintains security standards, baselines, procedures, metrics, reports, and documentation.

Serves as a technical escalation point for complex security issues, providing root cause analysis and remediation guidance.

Evaluates emerging threats, security tools, and architecture options to improve security posture.

Provides technical leadership, mentoring, and knowledge sharing across engineering and security teams.

Leads application security initiatives and coordinates security engineering efforts to ensure quality, consistency, and compliance.

Technical Skills Qualifications Strong experience with application security testing methodologies and tools, including SAST, SCA, Secrets Detection, and Infrastructure as Code (IaC) Security.

Solid understanding of vulnerability management, risk assessment, and remediation practices.

Proficiency in one or more programming or scripting languages, such as Python, Java, .NET, or similar technologies.

Experience with Git-based development workflows, source control management, and CI/CD pipeline integration.

Hands-on experience with application security and vulnerability scanning platforms such as Git Lab Advanced SAST, JFrog Xray, or equivalent solutions.

Experience with cloud platforms and cloud-native application security practices is preferred.

Ability to collaborate effectively with developers, Dev Ops engineers, and security teams to integrate security throughout the software development lifecycle.

Required Qualifications The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Bac…