Application Security Engineer

📋 Description

• Run client SAST, DAST, and SCA tools; review outputs and provide recommendations.
• Integrate tooling into pipelines and ticketing systems.
• Collaborate with developers to provide secure design guidance.
• Familiar with CI/CD systems (GitHub) and security tooling in workflows.
• Maintain and automate application security tooling.
• Strong understanding of web application security principles.

🎯 Requirements

• Bachelor's degree in CS/Info Systems/Info Security; 4 years in AppSec.
• 2 years with IDE and CI/CD tools (Azure DevOps, Jenkins, Bamboo).
• 2 years with Secure SDLC and remediating vulnerabilities from app scans.
• 2 years with tool integration into development pipelines and automation.
• Experience with SAST/DAST/SCA tools (Invicti, Checkmarx) and Burp Suite Pro.
• Experience reviewing code in JavaScript, Python, Java, C++, PHP, or C#.

🎁 Benefits

• Remote workforce primarily (U.S.-based; some travel; on-site for Federal roles).
• Group Medical Insurance: Zero Deductible PPO or High Deductible with HSA.
• Group Dental Insurance: employee premium covered; partial for family.
• 12 corporate holidays and Flexible Time Off (FTO).
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after open enrollment.