Senior Application Security Engineer
PowerSchool Group LLC4 days ago
Plano, TX, USASenior
Responsibilities
- Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
- Perform threat modeling, secure architecture reviews, and application security assessments.
- Provide secure coding guidance, security requirements, and implementation recommendations for web applications, APIs, cloud-native applications, and supporting services.
- Manage application security testing programs including SAST, DAST, SCA, secret scanning, and related security tooling.
- Analyze, prioritize, communicate, and track application security findings through remediation.
- Establish and improve application security standards, secure coding requirements, and secure development lifecycle processes.
- Evaluate third-party software, open-source dependencies, and software supply chain risks, including support for SBOM initiatives.
- Review penetration testing findings with Offensive Security Engineers and drive corrective actions.
- Deliver application security training, awareness materials, developer enablement, and security champions programs.
Requirements
- At least 5 years of experience in application security, software security, secure software development, DevSecOps, software engineering, or a related discipline.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field, or an equivalent combination of education, training, and experience.
- Experience with threat modeling, secure design reviews, application security assessments, and manual secure code reviews.
- Experience identifying and mitigating web application and API vulnerabilities, including OWASP Top 10 and OWASP API Security Top 10 vulnerabilities.
- Experience supporting SAST, DAST, SCA, secret scanning, and related application security technologies.
- Strong understanding of secure coding, software architecture, authentication, authorization, session management, cryptography, API security, and software supply chain security.
- Experience working with development teams to remediate security findings and implement secure solutions.
- Knowledge of cloud technologies and security concepts in AWS and/or Microsoft Azure environments.
- Experience with software development languages such as Java, C#, JavaScript, TypeScript, Python, or Go is preferred.
- Preferred experience includes container security, Kubernetes security, cloud-native application security, API security, threat intelligence, penetration testing, vulnerability management, and security champion programs.
- Familiarity with NIST Secure Software Development Framework, OWASP SAMM, or similar frameworks is preferred.
- Industry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSWE, Security+, Azure Security Engineer Associate, or AWS Security Specialty are preferred.
Benefits
- Comprehensive medical, dental, vision, pharmacy, life insurance, and AD&D coverage.
- Flexible Spending Accounts and Health Savings Accounts.
- Short-term and long-term disability coverage.
- Comprehensive 401(k) plan.
- Generous parental leave.
- Unrestricted paid time off through Discretionary Time Off.
- Wellness program including ClassPass and an Employee Assistance Program.
- Tuition reimbursement.
- Optional pet insurance, identity theft protection, student debt repayment, and prepaid legal coverage.
Categories
About PowerSchool Group LLC
PowerSchool builds cloud software for K-12 school districts, spanning student information, learning management (Schoology), enrollment, assessments, analytics, special education, and HR/finance. It sells these products as SaaS to districts and state agencies to manage data, instruction, and operations across schools and families. Headquartered in Folsom, CA, PowerSchool supports over 60 million students at more than 18,000 customers, including over 90 of the 100 largest U.S. districts by enrollment.