Application Security Engineer

Senior Software Engineer – Application Security -- MAZDC
5693188

Job Description

We are seeking a Senior Software Engineer with strong expertise in application security to join a forward-thinking technology team focused on enhancing secure software development practices. This role combines deep technical knowledge with the ability to collaborate across engineering and security teams to ensure robust, secure applications.

• Implement and manage software security testing techniques aligned with enterprise standards.
• Analyze and assess open-source vulnerabilities, including zero-day threats, and determine impact on applications.
• Develop and execute remediation plans for identified risks, including code refactoring and dependency updates.
• Champion secure coding practices and lead security reviews across engineering teams.
• Provide technical designs and recommendations to reduce vulnerabilities and improve security posture.
• Collaborate with development, architecture, and security teams to integrate security into the software delivery lifecycle.
• Stay current on emerging threats, tools, and best practices in application and cloud security.

• Strong experience in application security testing and software composition analysis.
• Knowledge of web application security, cloud security, and container security.
• Familiarity with OWASP, CWE, CVE standards and vulnerability mitigation techniques.
• Hands-on experience with tools such as Sonatype, Qualys, Sonar Qube, and AWS Inspector.
• Working knowledge of AWS services, Docker, Terraform, and Dev Sec Ops  practices.
• Excellent communication skills and ability to influence technical and non-technical stakeholders.

• Bachelor’s degree in Computer Science or related field (AWS and security certifications a plus).
• Experience collaborating with cross-functional teams and driving secure development initiatives.
• Familiarity with industry-standard tools for code quality, repository management, and CI/CD pipelines.

Mid-Senior level

Contract

Information Technology

IT Services and IT Consulting