Senior Application Security Engineer

Our client, a rapidly expanding software development company with a strong focus on innovation, is seeking a Senior Application Security Engineer to join their fully remote team. This role is critical in ensuring that all software developed by the company is secure by design and free from vulnerabilities. The engineer will work closely with development teams to embed security practices into the Software Development Lifecycle (SDLC), conduct security reviews, and implement automated security testing.

This is an exceptional opportunity for a security-conscious developer or engineer to make a significant impact on the security posture of cutting-edge applications. The position is entirely remote, allowing for flexible work arrangements.

• Integrate security into the SDLC, including threat modeling, security requirements gathering, and security design reviews.
• Develop and implement secure coding guidelines and best practices.
• Conduct security assessments of web applications, APIs, and mobile applications.
• Implement and manage security testing tools, including SAST, DAST, and IAST.
• Automate security testing processes within CI/CD pipelines.
• Work closely with development teams to remediate identified vulnerabilities.
• Provide security training and guidance to developers and other technical staff.
• Stay current with application security threats, vulnerabilities, and mitigation techniques.
• Perform security reviews of third-party components and libraries.
• Contribute to the development and maintenance of security architecture and standards for applications.

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• Minimum of 5 years of experience in software development or application security engineering.
• Proven experience in securing web applications and APIs against common threats (e.g., OWASP Top 10).
• Hands‑on experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Veracode, Checkmarx).
• Strong understanding of secure coding principles and vulnerability remediation.
• Experience with CI/CD pipelines and integrating security tools into them.
• Knowledge of common programming languages (e.g., Java, Python, C#, JavaScript) and their security implications.
• Excellent analytical, problem‑solving, and communication skills.
• Experience with cloud security principles (AWS, Azure, GCP) is a plus.
• Relevant security certifications such as CSSLP, GWAPT, or CEH are desirable.

This fully remote role offers a competitive salary, performance‑based incentives, comprehensive health benefits, and a generous budget for professional development, certifications, and conference attendance. Our client fosters a collaborative and innovative remote work culture, providing ample opportunities for career growth and advancement. Employees will have the flexibility to work from anywhere and contribute to the security of critical software applications.