Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct security code evaluations, threat modeling, and architectural assessments as part of a secure Software Development Life Cycle (SDLC).

• Work closely with development teams to embed secure design principles, coding standards, and security measures throughout the SDLC.

• Detect, monitor, and verify vulnerabilities and security issues identified through testing and scanning processes.

• Collaborate with development teams to prioritize remediation efforts in line with compliance timelines.

• Oversee external, independent penetration assessments of production environments.

• Lead application security evaluations, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Interactive Application Security Testing (IAST).

• Act as a subject matter expert on application security vulnerabilities, including the OWASP Top 10 and emerging threats.

⛳️ Requirements

• 3–7 years of experience in application security, secure development, penetration testing, or a related discipline.

• Practical experience with application/security testing tools (SAST, DAST, and/or IAST).

• Experience in integrating secure design principles into change management, code reviews, CI/CD pipelines, and secure development processes.

• Security+, GSEC, GSSP, or an equivalent certification.

• A bachelor’s degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related field (preferred).

• Knowledge of secure coding practices across various programming languages, such as C#, Go, Java, JavaScript, or Python.

• Understanding of cloud-native and Software as a Service (SaaS) application environments.

• An AI-forward mindset with a proven track record of using AI tools to boost productivity, decision-making, and work quality.

• Proven ability to effectively utilize AI tools to enhance productivity and results.

• Candidates must be authorized to work in the US.

• CivicPlus is currently unable to offer visa sponsorship for this position now or in the future.

🏝️ Benefits

• Comprehensive health insurance.

• Dental insurance.

• Vision insurance.

• Flexible Time Off.

• 401(k) plan.