Application Security Engineer
DecisionPoint Technologies, Inc.2 years ago
Remote, United StatesSenior
Responsibilities
- Conduct secure code reviews covering application logic, APIs, CMS modules, templates, configurations, and backend integrations.
- Perform API security assessments, vulnerability assessments, static and dynamic application security testing, and remediation validation.
- Integrate SAST/DAST tools, dependency scanning, and automated security controls into CI/CD pipelines.
- Manage secure secrets handling, encryption policies, API keys, tokens, credentials, authentication flows, and SSO integrations.
- Perform threat modeling and recommend mitigations for high-risk application features.
- Provide secure coding guidance and collaborate with developers, architects, product teams, DevSecOps staff, cloud engineers, PMO staff, and mission stakeholders.
- Support continuous monitoring, application-layer security alert triage, architecture discussions, sprint teams, and security documentation.
Requirements
- Active Top Secret clearance supported by a Tier 5 background investigation.
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
- At least 7 years of experience in application security engineering, secure software development, or cybersecurity.
- Experience with code reviews, application penetration testing or API security testing, static and dynamic testing tools, dependency scanning, software composition analysis, CI/CD security integration, DevSecOps, secrets management, encryption, and authentication protections.
- Strong knowledge of OWASP Top 10, secure coding principles, application-layer attack vectors, API security, token-based authentication, secure data handling, CMS security, identity and access management, certificate management, and secure authentication flows.
- Experience with AWS cloud-native application security tools, container security, Kubernetes workload protections, microservices security, modern CI/CD platforms, or DevSecOps automation is preferred.
- Security+, CISSP, or CCSP certification is required; AWS Security Specialty, GIAC secure coding or cloud security certifications, and CEH are preferred.
- Strong analytical, communication, collaboration, and attention-to-detail skills.
Benefits
- Fully remote work arrangement.
Tech Stack
Categories
About DecisionPoint Technologies, Inc.
DecisionPoint Technologies, Inc. provides enterprise mobility and edge technology integration for large organizations, combining its IntelliTrack asset and inventory platform with managed services such as device lifecycle management, RFID, and help desk support. The company sells hardware, software, and implementation/support services to enterprises in supply chain, retail, and government. Headquartered in Baltimore, Maryland, it operates across the U.S. and Canada and is privately held.