Senior Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Enhance the security posture of applications and cloud infrastructure.

• Design, implement, and manage security tools throughout the software development lifecycle.

• Advocate for a security-first culture within engineering teams.

• Incorporate security controls into the developer workflow, including SAST, DAST, SCA, secrets scanning, and IaC scanning.

• Collaborate with development teams to address vulnerabilities and offer secure coding advice and training.

• Create self-service security tools and repeatable security design patterns.

• Design and apply security controls across Azure workloads.

• Set and enforce cloud security posture standards.

• Identify anomalies, investigate alerts, and respond to emerging threats.

• Facilitate threat modeling sessions.

⛳️ Requirements

• Bachelor’s degree in computer science, cybersecurity, information security, or a related field.

• Relevant certifications (e.g., Azure Security Engineer Associate, CKS, GIAC, OSCP).

• Over 5 years of experience in Application Security, Secure Software Development, DevSecOps, Security Engineering, or a related cybersecurity field.

• Practical experience securing major cloud environments (AWS, Azure, GCP).

• Strong grasp of application security concepts (OWASP Top 10, secure SDLC, threat modeling).

• Experience with integrating security tools into CI/CD pipelines.

• Proficient in at least one scripting or programming language (e.g., Python, PowerShell, Go).

• Familiarity with infrastructure-as-code (Terraform, Bicep, ARM) and containerization (Docker, Kubernetes).

• Strong security-first mentality.

• Analytical and detail-oriented.

• Excellent communication abilities.

• Collaborative and accountable.

🏝️ Benefits

• Competitive compensation.

• Professional development benefits.

• Flexibility to balance personal and professional life.