Application Security Engineer

Application Security Engineer Pay Rate: Up to $72.10/hour Duration: 6-month contract Location: Fully Remote

Summary We are seeking an Application Security Engineer for a contract opportunity ideal for candidates looking to build or advance their careers in application security. In this role, you will validate static application security testing (SAST) and software composition analysis (SCA) results, investigate potential vulnerabilities, and collaborate with software developers to support remediation efforts. You will work alongside application security professionals and development teams to identify risks, recommend mitigation strategies, and help integrate security practices into the Software Development Lifecycle (SDLC).

What You'll Do

• Partner with software engineers to identify and address security risks, providing mitigation recommendations throughout the SDLC.
• Analyze application security scanner results, including SAST and SCA findings, to identify potential vulnerabilities.
• Investigate and validate identified vulnerabilities, assess their applicability, and perform risk analysis as needed.
• Configure and fine-tune security scanning tools to improve the accuracy and relevance of results within application environments.
• Communicate security findings to developers and application owners, tracking vulnerabilities through remediation and resolution.
• Collaborate with application security engineers and development teams to align security activities with development schedules and release timelines.
• Support security architecture and feature design reviews to help identify potential risks early in the development process.
• Evaluate application security risks across enterprise application architectures and multi-tier systems.

What You Bring

• 2+ years of experience working within software development.
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience of more than 7 years.
• Experience working with multiple programming languages, such as Java, Go, Python, or Perl.
• Understanding of common application security vulnerabilities, including the OWASP Top 10, and methods for identifying and remediating them.
• Familiarity with enterprise application architectures designed for scalability and reliability, including security considerations.
• Experience participating in security architecture and feature design reviews.
• Strong written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• High level of personal integrity and sound judgment when handling confidential information and security-related matters.
• Ability to work independently, collaborate effectively with development teams, and manage multiple priorities.

Bonus Points If You Have

• Experience securing hosts, databases, and applications within multi-tier systems.
• Experience with penetration testing.
• Knowledge of automated attack tools and vulnerability mitigation techniques.
• Ability to think like an attacker to identify potential security weaknesses.
• Experience with AWS and Akamai technologies.
• Relevant information security certifications, such as GWAPT, OSCP, or equivalent credentials.
• Strong analytical, evaluative, and problem-solving skills.

TCWGlobal is an equal opportunity employer. We do not discriminate based on age, ethnicity, gender, nationality, religious belief, or sexual orientation. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.