Senior Application Security Engineer (Remote-First)

About the Role

Our client, a fast-growing software development company committed to building secure and reliable applications, is seeking a talented and experienced Senior Application Security Engineer to join their entirely remote team. This role is critical in ensuring that security is integrated into every stage of the software development lifecycle (SDLC), from design to deployment and maintenance. You will work closely with development teams to identify and mitigate vulnerabilities, implement secure coding practices, and conduct security testing. This position is perfect for a security-focused engineer who excels in a remote-first environment and is passionate about building secure software products. You will have the opportunity to influence security standards and processes across the organization.

Key Responsibilities

• Collaborate with development teams to integrate security requirements into the SDLC.
• Conduct security reviews of application designs and code.
• Perform security testing, including static (SAST) and dynamic (DAST) application security testing.
• Identify, assess, and prioritize application vulnerabilities.
• Develop and implement remediation strategies for identified security flaws.
• Create and maintain secure coding guidelines and best practices.
• Provide security training and awareness to development teams.
• Assist in the implementation and management of application security tools and technologies.
• Stay current with emerging application security threats and vulnerabilities.
• Participate in incident response activities related to application security breaches.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field.
• 5+ years of experience in application security, software development, or a related security role.
• Strong understanding of common application vulnerabilities (e.g., OWASP Top 10) and secure coding principles.
• Experience with SAST, DAST, and penetration testing tools.
• Proficiency in at least one programming language (e.g., Java, Python, C#, JavaScript).
• Familiarity with secure development frameworks and methodologies.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and effectively collaborate with remote development teams.
• Relevant certifications like GWAPT, GWEB, or CSSLP are a plus.
• Experience with cloud security (AWS, Azure, GCP) is beneficial.

Benefits

• Our client offers a highly competitive salary and performance-based bonuses.
• As a fully remote employee, you'll enjoy significant flexibility in your work hours and location, a home office stipend, and access to extensive professional development resources.
• Comprehensive health, dental, and vision insurance are provided, alongside a strong retirement savings plan.
• This is an excellent opportunity to make a significant impact on the security of software applications for a dynamic company, working with a motivated and talented remote team.
• You'll be instrumental in building trust through secure software.