Description Application Security Engineer - Job Description Open Dealer Exchange (ODE) is seeking an Application Security Engineer to support its workforce at our headquarters in Southfield, MI. As an AppSec Engineer, you will serve as a security liaison to development and business teams, triaging and prioritizing findings from our application security tooling across our product lines. The ideal candidate will have experience with application security concepts, vulnerability triage, and secure software development practices. Open Dealer Exchange is a dynamic, exciting place to work. Open Dealer Exchange offers a hybrid work model as well as an excellent compensation/benefit package.
Responsibilities
- Stakeholder Liaison: Serve as the primary security point of contact for development and business teams, translating security findings into clear, actionable guidance.
- Vulnerability Triage: Validate, prioritize, and escalate findings from our application security tooling based on business risk and impact.
- Security Tooling Management: Own application security tooling policy and rule tuning across our product lines.
- Remediation Tracking: Partner with development teams to track vulnerabilities through to resolution.
- Incident Support: Step directly into development work to help resolve critical security issues during emergencies such as zero-day vulnerabilities or active incidents.
- Secure Development Practices: Participate in security reviews of user stories and development work as part of our standard review process.
- Security Standards: Help author and maintain technical security standards that translate policy into practical guidance for developers.
- Modern Tooling: Use AI and automation to help scale security operations and improve efficiency.
Requirements
Job Requirements
- Bachelor’s degree in computer science or a related field, or equivalent professional experience.
- 2 to 4 years of related work experience in application security, software development, or a related technical field.
- Experience triaging and prioritizing software vulnerabilities based on business risk and impact.
- Experience working within a software development lifecycle (SDLC) environment.
- Ability to communicate technical security findings clearly to both technical and non-technical stakeholders.
- Ability to work independently and collaboratively across cross-functional teams in a fast-paced environment.
- Will accept any suitable combination of education, training, or experience.
Desired Skills
- Experience with application security tooling.
- Familiarity with secure software development lifecycle (SDLC) practices.
- Experience with cloud environments (Azure preferred).
- Strong communication skills and comfort working directly with developers and business stakeholders