Senior Application Security Engineer

Technosylva

Senior Application Security Engineer advancing Technosylva’s cloud-native AppSec program. Embedding secure SDLC practices, DevSecOps controls, and measurable vulnerability management across engineering teams.

Posted 8/25/2026full-timeRemote • 🇲🇽 MexicoSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Application Security, secure SDLC processes, and vulnerability management, with a strong focus on integrating security practices into development workflows. Proven ability to lead AppSec initiatives, drive secure coding standards, and provide guidance to both technical and non-technical stakeholders.

Highest-signal resume keywords

Application Security Program LeadershipSecure SDLC ProcessesCI/CD Pipeline SecurityOWASP Top 10 ExpertiseVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Secure SDLCThreat ModelingSASTDASTContainer SecurityIaC SecurityAPI SecurityCode ReviewSecurity ArchitectureProduction-Grade Code Review

Soft Skills

Excellent CommunicationInterpersonal SkillsProactive Problem-SolvingCoordinationOwnership

Tools & Technologies

GitLab SecurityGitHub SecurityCI/CD ToolsSecurity AutomationAI/ML Tools

Certifications & Qualifications

CSSLPCISSPOSCPGIACAzure CertificationsAWS Certifications

Industry Keywords

DevSecOpsCloud-NativeSaaSVulnerability Management ProgramsSecurity Architecture Reviews

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityKubernetesSDLC

About the role

Key responsibilities & impact

Lead the evolution of Technosylva's Application Security program and roadmap
Define and improve secure SDLC processes across all engineering teams
Establish security-by-design practices integrated into development workflows
Drive adoption of secure coding standards, threat modeling, and security architecture reviews
Build measurable AppSec KPIs and leadership reporting
Improve GitLab/GitHub security capabilities and integrations, including SAST, DAST, dependency scanning, container scanning, secrets detection, and IaC security workflows
Embed security into CI/CD pipelines and define risk-based security gates and exception processes
Partner with developers, architects, and technical leads to remediate vulnerabilities, translate security requirements into actionable tasks, and conduct code reviews
Establish application vulnerability management processes covering triage, business-risk prioritization, SLAs, closure tracking, and executive reporting
Drive AppSec initiatives from planning through execution across Engineering, Infrastructure, Product, and Security teams
Produce documentation and implementation plans
Deliver secure coding guidance, workshops, awareness sessions, and mentoring for junior engineers
Act as a trusted security advisor to technical and non-technical stakeholders

Requirements

What you’ll need

Minimum 10 years of experience across Application Security, S-SDLC/DevSecOps, or Software Engineering/Security Engineering
Proven track record driving AppSec programs in medium or large organizations within modern SDLC, cloud-native, and SaaS environments
Strong technical expertise in OWASP Top 10, API security, multi-tenant application security, threat modeling, and security architecture reviews
Hands-on experience with CI/CD pipeline security, SAST/DAST, SCA, secrets management, container/Kubernetes security, and IaC security
Strong understanding of software engineering practices and modern development frameworks/APIs
Ability to read and review production-grade code
Project management, executive-level reporting, documentation practices, and prioritizing work based on business risk
Excellent communication, coordination, and interpersonal skills
High level of ownership, autonomy, maturity, and proactive problem-solving
Penetration testing, red teaming, or offensive security experience preferred
Experience leading vulnerability management programs, security automation, and scripting preferred
Practical experience applying AI/ML tools in development and cybersecurity preferred
Specialized experience with GitLab/GitHub Security features preferred
Security certifications such as CSSLP, CISSP, OSCP, GIAC, or Azure/AWS certifications preferred

Benefits

Comp & perks

Competitive annual salary
Private health insurance
Flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs
Annual bonus based on individual performance and company results
Flexible working hours
Remote work options