Job Title: Application Security Engineer
Direct Hire: Must be authorized to work in the United States now and in the future without assistance.
Pay: $115,000-$140,000 annually, plus a 16% target bonus
Work Schedule: Full-time. Onsite 3 times a week.
Benefits: This position is eligible for medical, dental, vision, and 401(k).
Join a security team working to strengthen application testing, expand automation, and improve incident response capabilities. This role requires a hands-on professional who can assess application risks, embed security checks into development workflows, and help refine operational practices.
The anticipated scope includes approximately 40% application security, 40% digital forensics and incident response, and 20% vulnerability management.
Key Responsibilities: - Incorporate application scanning tools into CI/CD workflows to support automated, repeatable security testing.
- Analyze scan results, validate potential weaknesses, and conduct additional hands-on application assessments.
- Partner with engineering teams to prioritize security findings and guide corrective action.
- Investigate security events and contribute to forensic examinations, incident containment, and recovery efforts.
- Evaluate vulnerabilities, determine their potential impact, and support remediation activities.
- Improve testing procedures and operational workflows as the security program evolves.
- Apply established security frameworks to maintain consistent assessments across applications.
- Contribute to emerging initiatives involving AI security testing and AI harness development.
Qualifications: - At least five years of relevant professional experience; seven or more years preferred.
- Practical experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
- Working knowledge of the OWASP Top 10 and structured application security testing methods.
- Understanding of confidentiality, integrity, and availability-the foundational principles of the CIA triad.
- Experience adding security testing and automation to CI/CD pipelines.
- Ability to explain technical findings and collaborate with software engineering and security teams.
- Demonstrated ability to improve processes and work independently through technical challenges.
- Exposure to digital forensics, incident response, and vulnerability management is valuable.
- Experience or interest in AI security testing and harness development is a plus.
- No degree is required. Relevant hands-on experience and certifications will be considered.
