Application Security Engineer
Phoenix, Maricopa County, Arizona, 85001, USA
Listed on 2026-11-01
-
IT/Tech
Cybersecurity, IT Consultant, Information Security & Data Protection, Cloud Computing: Infrastructure & Operations
Location Remote Department Offensive Security Reports to Head of Security Operations
As an Application Security Engineer at Cyber Blade, you secure our clients' applications by finding, analyzing and fixing risks across the software lifecycle,from design through deployment.
Conduct manual and automated source code reviews to identify vulnerabilities and recommend security improvements.
Perform security testing on web, mobile and API applications, simulating real-world attacks to uncover weaknesses.
Threat ModelingAnalyze application architecture and design to proactively identify potential security risks and provide mitigation strategies.
Dev Sec Ops and Security AutomationCollaborate with Dev Ops teams to integrate security tools and processes into CI/CD pipelines for continuous testing and compliance.
Security Training and AwarenessGuide and train developers on secure coding practices, common vulnerabilities such as the OWASP Top 10, and secure development principles.
Vulnerability Management, Tooling and Incident SupportTrack, prioritize and help remediate vulnerabilities, build or improve security tooling, and assist in investigating application security incidents.
Required Qualifications
What we are looking for- Application security expertise. Proven experience securing web and mobile applications, with a deep understanding of vulnerabilities such as SQL injection, XSS, CSRF and SSRF.
- Penetration testing and security tools. Hands-on experience with Burp Suite, ZAP, SAST and DAST solutions, and fuzzing tools.
- Threat modeling and risk assessment. Experience performing threat modeling and assessing risk in application architectures.
- Dev Sec Ops and CI/CD integration. Familiarity integrating security tools into Dev Ops workflows using Git Hub Actions, Jenkins, Git Lab CI/CD or Azure Dev Ops.
- Cloud security knowledge. Experience securing applications deployed on AWS, Azure or Google Cloud.
- Scripting and automation. Ability to develop scripts or tools in Python, Bash or Power Shell to automate security tasks.
Whether you are a CEO or an individual in a home office, we keep pricing fairand stay in your corner long after the engagement ends. Tell us what you are protecting.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).