Remote jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 5 hours ago
Product Cybersecurity Engineer
Toyota Tsusho Systems
Remote, United States
This role helps in ensuring security quality and operational readiness of PCG (Product Cybersecurity Group) products before deployment to market and maintaining alignment to cybersecurity…
Added 8 hours ago
C
Senior Security Engineer
Curri
Remote, United States
- $178,000 to $215,000 USD / year
Curri is hiring its first dedicated Senior Security Engineer to join the Foundations team, which owns security, infrastructure, DevOps, and our AI engineering platform. Curri runs last-mile…
Added 9 hours ago
Internal Tools Engineer
Nutrient
Remote, United States
As an Internal Tools Engineer with a strong focus on backend development, you will work on our applications, which power a lot of internal and external needs of the company, from product…
Added 9 hours ago
Senior Associate - Middleware Engineer
New York Life
Remote, United States
Serve as a senior engineering owner for New York Life's enterprise middleware platforms. You will engineer, operate, harden, and modernize the runtime and integration services that support…
Added 9 hours ago
Senior Associate - Database Engineer
New York Life
Remote, United States
…approved relational or object database technologies. You will engineer, operate, harden, automate, and modernize database services supporting critical business workloads across private…
Added 9 hours ago
Vulnerability Engineer
ECS FEDERAL LLC
Remote, United States
In this role, you will engineer, implement, integrate, and optimize enterprise vulnerability management capabilities across complex on-premises, cloud, and hybrid environments. You will…
Added 9 hours ago
Windows System Engineer
LEIDOS, INC.
Remote, United States
…geographically distributed environments. The Windows System Engineer partners with the Senior Windows System Engineer to implement, maintain, and troubleshoot Windows, virtualization, and…
Added 9 hours ago
Cybersecurity Engineer / Information System Security Engineer (ISSE) – DoD Healthcare
LEIDOS, INC.
Remote, United States
Familiarity with cloud security principles, shared responsibility models, identity and access management, encryption, logging, and vulnerability management.
Added 9 hours ago
OS
Product Security Engineer
Opto-Knowledge Systems Inc
Remote, United States
- $154,000 to $210,000 USD / year
You must have, or be eligible to obtain, a U.S
Added 10 hours ago
Lead Microsoft Platform Administrator
Systems Engineering Solutions Corporation
Remote, United States
· Make sure security hardening and vulnerability remediation meet agency security requirements, NIST controls, and federal cloud security standards.
Added 10 hours ago
Lead Reliability & Performance Engineer
Johnson & Johnson Services Inc. Legal Entity
Remote, United States
The Lead Reliability and Performance Engineer will lead the strategy, delivery, and operational performance of the Windchill-based Product Lifecycle Management platform supporting MedTech.…
Added 10 hours ago
Cloud Engineer
Goldbelt, Inc.
Remote, United States
Provide guidance on Secure Computing Architecture, Cloud Brokerage Services, Shared Security Services Management, Cloud Security Support Services, Cloud Governance, Federal Risk and…
Added 10 hours ago
Senior OpenText Systems Engineer - DLA DACS
Bart & Associates
Remote, United States
Must possess a current DoD 8570/8140-compliant IAT Level II certification (such as CompTIA Security+ CE, CySA+, or GSEC, as applicable)
Added 11 hours ago
Windows Team Lead Engineer
CSC
Remote, United States
Lead the team to follow policies and procedures for time tracking, security, change control, problem / root cause analysis investigations and incident management.
Added 11 hours ago
AC
Application Systems Engineer
AG Consulting Partners, Inc.
Remote, United States
- $80,000 to $95,000 USD / year
The Engineer will work closely with application developers, database administrators, network and security teams, business stakeholders, vendors, and other technical teams to maintain system…
Added 12 hours ago
P
SecOps Engineer - Secret clearance - travel role
PGTEK
Remote, United States
- $110,000 to $145,000 USD / year
Location: Hybrid – Must reside near a primary DISA DHMC site
Added 12 hours ago
P
SecOps Engineer - Secret clearance - travel role
PGTEK
Remote, United States
- $110,000 to $145,000 USD / year
Location: Hybrid – Must reside near a primary DISA DHMC site
Added 12 hours ago
P
SecOps Engineer - Secret clearance - travel role
PGTEK
Remote, United States
- $110,000 to $145,000 USD / year
Location: Hybrid – Must reside near a primary DISA DHMC site
Added 12 hours ago
P
SecOps Engineer - Secret clearance - travel role
PGTEK
Remote, United States
- $110,000 to $145,000 USD / year
Location: Hybrid – Must reside near a primary DISA DHMC site
Added 12 hours ago
Senior Application Security Engineer
TrueCommerce
Remote, United States
We are seeking a Senior Application Security Engineer to proactively engage with Engineering and TechOps to ensure the security of TrueCommerce’s customer-facing products. You will…
Added 12 hours ago
R
Principal AI Engineer
Rapid7
Remote, United States
- $221,000 to $299,000 USD / year
Rapid7's AI Engineering team builds the AI that powers our security platform. We are AI engineers and applied scientists who take models from research to production, combining open-source…
Added 13 hours ago
GRC Engineer I (CMMC)
Workstreet
Remote, United States
Execute continuous monitoring (ConMon) cycles, actively tracking monthly vulnerability management logs, incident response reports, and structural change control workflows.
Added 13 hours ago
Lead Windows System Administrator (Remote Opportunity)
Mind Computing
Remote, United States
The candidate must reside within the continental US
Added 15 hours ago
MA
OpenShift Platform Engineer
Manufacturers and Traders Trust Co
Remote, United States
- $97,100 to $161,800 USD / year
M&T Bank is seeking an experienced OpenShift Platform Engineer to support, operate, automate, and improve its enterprise container platform. This individual-contributor role supports…
Added 15 hours ago
Cloud Engineer
Peraton
Remote, United States
Working knowledge of DoW STIGs and IA Vulnerability Management (IAVM).

TrueCommerce

Senior Application Security Engineer

Remote, United States

Apply on recruiting2.ultipro.com About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 13, 2026

Original job description

Ready to enable the testing and build the workflows required to make the products our customers rely on secure by design? Come join the team protecting a global supply chain technology company and the thousands of customers who depend on it.

We are seeking a Senior Application Security Engineer to proactively engage with Engineering and TechOps to ensure the security of TrueCommerce’s customer-facing products. You will implement and tune automated, repeatable testing and practices, and help engineering teams own the security of what they build, as part of our One TC security culture.

Reporting to the Senior Director of Information Security, you will be accountable for the tooling, testing coverage, and vulnerability remediation workflow of our application security program. You must be a technical, hands-on practitioner: configuring and operating tools, triaging findings, and partnering directly with developers, while applying AI to achieve scale and speed and actively managing risk. This is an engineering role, not an analyst role. You’ll build and tune the pipeline, not just consume its output. You will be operating, maintaining, and evangelizing our application security program.

We value our employees with competitive benefits and generous paid time off packages, flexible and casual work environments, career development, recognition programs, and more!

This role is a remote opportunity.

What You'll Do:

Operate the application security program for customer-facing B2B products, working with Engineering and TechOps to embed security by design into planning, development, and release.
Implement and operate automated security testing (SAST, DAST, and SCA) within CI/CD pipelines, replacing manual practices and driving adoption by software engineering teams.
Configure and maintain AppSec tooling and the vulnerability management platform, ensuring findings are consistently collected, deduplicated, and tracked across products and repositories.
Prioritize vulnerabilities based on severity, known exploitation, reachability, and business impact, and drive remediation with Engineering and TechOps to agreed timelines.
Perform security architecture and design reviews and threat modeling for new products and features, including the API program, so that secure products can launch with repeatable practices.
Automate and orchestrate AppSec workflows, such as finding triage, remediation guidance, and reporting, using Anthropic Claude API, OpenAI, or equivalent LLM providers, with appropriate validation and guardrails.
Assess the security of AI-enabled product features and workflows, including risks such as prompt injection, data leakage, and model misuse.
Develop and maintain secure coding standards and technical guidance for software engineering, and contribute them to the Infosec library of policies, standards, guidelines, and procedures.
Support data protection for customer-facing products, including encryption, secrets management, and the retirement of weak ciphers and legacy protocols.
Track product security risks, exceptions, and risk acceptances, and contribute technical input to the Infosec risk register and risk assessments.
Contribute to incident response for product security events, including investigation, containment support, and post-incident review, and participate in incident simulation exercises.
Build and report AppSec metrics, including tool coverage, adherence, and remediation timeliness, that feed Infosec KPIs and KRIs and executive reporting.
Provide technical evidence and subject matter input for audits, customer security assessments, and compliance obligations.
Support the One TC security culture by coaching developers, delivering secure development guidance, and helping Infosec shift from auditor to advisor.
Stay current on emerging threats, application security practices, and AI-related security and privacy concerns.

Requirements for Success:

5+ years in application and/or product security.
Hands-on experience implementing and operating SAST, DAST, and SCA tools within CI/CD pipelines.
Experience triaging and prioritizing vulnerabilities using severity, known exploitation, reachability, and business impact, and driving them to remediation.
Ability to review code and advise on remediation in .NET/C#.
Experience performing threat modeling and security architecture and design reviews.
Working knowledge of secure API design, OAuth/OIDC and JWT handling, secrets management, and encryption fundamentals.
Strong working knowledge of OWASP Top 10s, ASVS, and Proactive Controls, and the ability to translate findings into business risk.
Scripting or programming ability (e.g., Python, PowerShell, C#) to automate security workflows and integrate tools via APIs.
Clear communication with technical and non-technical audiences, and the ability to influence engineering teams without direct authority.
Preferred: Experience using LLM APIs (e.g., Claude, Copilot) to automate AppSec work such as triage, remediation guidance, or reporting.
Preferred: Experience assessing AI-enabled features for risks such as prompt injection, data leakage, and model misuse.
Preferred: Experience with Azure DevOps, DefectDojo, and common open source security scanners.
Preferred: Experience securing Azure-hosted environments, including IaC, containers, and secrets scanning.
Preferred: Working knowledge of C++ and Angular.
Preferred: Manual web and API penetration testing experience, especially for access control and multi-tenant isolation.
Preferred: Experience in B2B SaaS, multi-tenant platforms, or supply chain/EDI environments.
Preferred: Experience supporting security incident response.
Preferred: Experience providing evidence for audits (SOC 2, ISO 27001, PCI) and customer security assessments.
Preferred: Relevant certifications such as OSWE, GWEB, CSSLP, or AZ-500.

Perks & Benefits

Remote first and casual work environment
401k with 3.5% company match and vested after 2 years
20 PTO days - 10 company holidays - 1 birthday day off - 1 Volunteer day - 3 summer days
Medical, dental, vision and other life/health insurance plans
Paid parental leave
Wellness reimbursement program

Who is TrueCommerce?

TrueCommerce is a high-performing global supply chain network that delivers fully integrated, end-to-end supply chain visibility and management. We help some of the world’s leading brands improve supply chain performance, including Schneider Electric, DanoneWave, Siemens, Ocean Spray, and many others.

For additional information, visit our website.

Applicants must be authorized to work for any employer in the U.S. At this time, we are unable to sponsor or take over sponsorship of an employment visa for this role.

Apply on recruiting2.ultipro.com About employer

Report this job

Work requirements

Remote jobs in the United States