Application Engineer

• Conduct security architecture reviews and threat modeling sessions with development teams using STRIDE methodology
• Perform application security assessments across 20+ security verification service offerings including SAST/DAST analysis, manual code review, API security testing, authentication/authorization testing, and vulnerability validation
• Execute hands-on security testing of web applications, APIs, mobile applications, and cloud-native services
• Analyze and validate security findings from automated tools (GitHub Advanced Security, Synack, Tenable, AquaSec) and provide actionable remediation guidance
• Support penetration testing engagements and coordinate with third-party security assessment vendors (Synack ST+)

Senior Application Security Engineer

• Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.
• Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
• Define, maintain, and enforce secure coding standards, patterns, and best practices.
• Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.
• Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.
• Support threat modeling, risk assessments, and security architecture reviews for applications.
• Ensure that all security practices meet regulatory and compliance requirements.
• Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.
• Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).
• Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
• Monitor and respond to application security threats, incidents and vulnerabilities.
• Stay up to date on regulatory developments and industry trends.
• Manage and maintain third-party vendor and consultant relationships.
• Perform other duties as assigned.

See all jobs on JobTailor

Senior Application Security Engineer

Application Security Engineer