Application Security Engineer
- Remote, United States
$127,000 USD / year
Applications open in a new tab.
Job details
- Pay
- $127,000 USD / year
- Experience
- 5+ years of experience in application security, secure software engineering, or a closely related application-focused security discipline.
- Posting language
- English
- Posted
Original job description
Required Skills & Experience
-5+ years of experience in application security, secure software engineering, or a closely related application-focused security discipline. -5+ years of hands-on experience supporting secure SDLC activities, including code review, security testing, vulnerability remediation, and collaboration with software-development teams. -Hands-on experience with SAST, DAST, software composition analysis, dependency scanning, and vulnerability-management workflows; experience with Snyk and Dependabot is strongly desired. -Practical knowledge of web and API security, including the OWASP Top 10, authentication, authorization, secrets management, secure configuration, and common remediation techniques. -Experience securing AWS-hosted applications and integrating AppSec controls into CI/CD pipelines and automated development workflows. -Bachelor’s degree in computer science, information security, software engineering, or a related field. The formal description allows equivalent experience, but the client intake identifies the degree as a screening requirement. -Current authorization to work permanently in the United States without sponsorship, specifically U.S. citizenship or permanent residency.
Nice to Have Skills & Experience
-FinTech banking, mortgage servicing, or regulated financial-services experience; -CISSP or CSSLP certification; -Familiarity with React, Angular, Node.js, Java, or JavaScript.
Job Description
A customer of Insight Global is looking to hire an Application Security Engineer to come onboard! This individual will partner closely with software engineering, architecture, application, and DevOps teams to integrate secure-by-design practices throughout the software development lifecycle. The role will focus on SAST, DAST, dependency analysis, secure code review, threat modeling, vulnerability prioritization, remediation validation, and the continued improvement of application security tooling. The ideal candidate can communicate technical security risks clearly, mentor developers on practical remediation, and balance security requirements with application-delivery needs in a highly collaborative remote environment. If you believe you are the right fit for the role, we welcome you to apply!