Cyber Security Engineer

A leading mortgage company is seeking a talented Application Security Engineer to help secure internally developed applications, APIs, and software delivery processes. This role partners with engineering, architecture, and DevOps teams to embed security throughout the SDLC and strengthen secure-by-design practices. Position is 100% remote and comes with strong company benefits. This is a direct hire position; candidate must be eligible to work in the United States.

Responsibilities:

• Perform threat modeling, secure design reviews, and architecture assessments
• Review SAST, DAST, SCA, and secrets scanning results; support risk-based remediation
• Help define secure coding standards, guardrails, and security patterns
• Guide developers on secure coding and vulnerability remediation
• Support security testing for web, API, and cloud applications
• Maintain and improve AppSec tools and CI/CD security integrations
• Deliver developer security training and support audit and compliance efforts.

Qualifications:

• Bachelor’s degree or equivalent experience in computer science, information security, software engineering, or a related field
• 5+ years of application security or secure software engineering experience
• 5+ years partnering with development teams on secure SDLC, code review, vulnerability remediation, and security testing
• Prior software development experience preferred
• CSSLP, CISSP, or similar certifications preferred
• Strong knowledge of web, API, and distributed application security
• Experience with OWASP Top 10, authentication, authorization, secrets management, and secure configuration
• Experience with AWS, CI/CD security, and AppSec automation
• Strong communication, problem-solving, and risk-based decision-making skills