Senior Application Security Engineer
PowerSchool Group LLC4 days ago
Plano, TX, USASenior
Responsibilities
- Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
- Perform threat modeling and secure architecture and design reviews for new and existing applications.
- Provide secure coding guidance, application security consultation, and security requirements to engineering teams.
- Manage application security testing programs covering SAST, DAST, SCA, secret scanning, and related security technologies.
- Analyze, validate, prioritize, communicate, and track application security findings through remediation.
- Establish and improve application security standards, secure coding requirements, and secure development lifecycle processes.
- Evaluate third-party software, open-source dependencies, and software supply chain risks.
- Support SBOM and software supply chain security initiatives.
- Develop security requirements, patterns, and implementation guidance for web applications, APIs, cloud-native applications, and supporting services.
- Review penetration testing findings with Offensive Security Engineers and drive corrective actions.
- Deliver application security training, awareness materials, developer enablement, and security champions programs.
Requirements
- At least 5 years of experience in application security, software security, secure software development, DevSecOps, software engineering, or a related discipline.
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field, or an equivalent combination of education, training, and experience.
- Experience with threat modeling, secure design reviews, and application security assessments.
- Experience identifying and mitigating web application and API vulnerabilities, including OWASP Top 10 and OWASP API Security Top 10 vulnerabilities.
- Experience supporting SAST, DAST, SCA, secret scanning, and related security tooling.
- Strong understanding of secure coding, software architecture, secure development, authentication, authorization, session management, cryptography, API security, and software supply chain security.
- Experience working with software development teams to remediate security findings and implement secure solutions.
- Familiarity with CI/CD pipelines, DevOps practices, and cloud security concepts in AWS and/or Microsoft Azure.
- Strong analytical, communication, presentation, and stakeholder management skills.
- Preferred experience in SaaS, cloud-native, software development, mature Product Security, or DevSecOps organizations.
- Preferred experience with secure code reviews, SBOM generation, dependency management, open-source risk management, container security, Kubernetes security, cloud-native application security, API security, threat intelligence, penetration testing, vulnerability management, security champions, and developer security training.
- Familiarity with NIST Secure Software Development Framework, OWASP SAMM, or similar frameworks is preferred.
- Industry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSWE, Security+, Azure Security Engineer Associate, AWS Security Specialty, or equivalent are preferred.
Benefits
- Comprehensive medical, dental, vision, pharmacy, life insurance, and AD&D coverage.
- Flexible Spending Accounts and Health Savings Accounts.
- Short-term and long-term disability coverage.
- Comprehensive 401(k) plan.
- Generous parental leave.
- Unrestricted paid time off through Discretionary Time Off.
- Wellness program including ClassPass and an Employee Assistance Program.
- Optional pet insurance, identity theft protection, student debt repayment, and prepaid legal coverage.
- Tuition reimbursement.
Categories
About PowerSchool Group LLC
PowerSchool builds cloud software for K-12 school districts, spanning student information, learning management (Schoology), enrollment, assessments, analytics, special education, and HR/finance. It sells these products as SaaS to districts and state agencies to manage data, instruction, and operations across schools and families. Headquartered in Folsom, CA, PowerSchool supports over 60 million students at more than 18,000 customers, including over 90 of the 100 largest U.S. districts by enrollment.