Senior Application Security Engineer, Development (52213)

3 hours ago

Remote, WorldwideSenior

Responsibilities

Integrate application security controls including SAST, DAST, SCA, secrets scanning, and IaC scanning into developer workflows.
Partner with development teams on vulnerability remediation, secure coding guidance, training, code reviews, assessments, and security design patterns.
Design and implement Azure security controls for identity, networking, encryption, key management, cloud posture, compliance baselines, and guardrails.
Deploy and operate CNAPP tooling covering CSPM, CWPP, CIEM, and container/Kubernetes security.
Monitor, investigate, prioritize, and respond to application, cloud, workload, and evolving threat findings.
Embed automated security gates into CI/CD pipelines and secure the software supply chain, build environments, credentials, and deployment processes.
Lead threat modeling, define SDLC security metrics and KPIs, and communicate cloud risk to technical and executive stakeholders.

Bachelor’s degree in computer science, cybersecurity, information security, or a related field, or equivalent experience.
At least five years of experience in application security, secure software development, DevSecOps, security engineering, or a related cybersecurity discipline.
Relevant certifications such as Azure Security Engineer Associate, CKS, GIAC, or OSCP.
Hands-on experience securing major cloud environments and services including AWS, Azure, or GCP.
Strong understanding of OWASP Top 10, secure SDLC practices, and threat modeling.
Experience integrating security tooling into CI/CD pipelines.
Proficiency with at least one scripting or programming language such as Python, PowerShell, or Go.
Familiarity with infrastructure-as-code tools such as Terraform, Bicep, or ARM and containerization with Docker or Kubernetes.
Strong security-first mindset, analytical and detail-oriented approach, excellent communication skills, collaboration, and accountability.

1,001-5,000 employees