Senior Application Security Engineer

Senior Application Security Engineer at DigiCert

DigiCert is seeking a Senior Application Security Engineer to join our security team. You will design, implement, and operate security controls across DigiCert's software applications, APIs, and services. Collaborating with product and engineering teams, you will embed security into the software development lifecycle and help protect our customers' PKI and TLS-based solutions.

Overview

As a senior member of the application security group, you will drive secure design, testing, and remediation efforts across DigiCert’s stack. Your work will influence how we build resilient software that defends against evolving threats while ensuring a smooth developer experience.

Responsibilities

• Lead threat modeling and secure design reviews for new features and architectures.
• Perform SAST/DAST and manual application security testing; identify, triage, and remediate vulnerabilities.
• Develop and maintain secure coding guidelines and integrate security automation into CI/CD pipelines.
• Collaborate with developers, DevOps, and platform teams to implement secure infrastructure and cloud security controls.
• Monitor, investigate, and respond to security incidents; coordinate with incident response teams as needed.
• Mentor junior engineers and contribute to security training programs.

Requirements

• 5+ years of experience in application security or software security.
• Strong knowledge of OWASP Top Ten and secure SDLC practices.
• Experience with SAST/DAST tools and manual security testing.
• Proficiency in at least one programming language (e.g., Python, Go, Java) and scripting (e.g., Bash).
• Experience with cloud environments (AWS/Azure/GCP) and containerization (Docker, Kubernetes).
• Familiarity with PKI/TLS, certificate management, and cryptographic concepts.
• Security certifications (e.g., CISSP, CSSLP, OSCP) or equivalent preferred.

About DigiCert

DigiCert is a leading provider of digital trust and PKI solutions, delivering SSL/TLS certificates, identity management, and security services to organizations worldwide.

How to apply

Please apply through DigiCert's Careers site.