Senior Application Security Engineer
Wilson Elser - Business & Legal Professionals2 months ago
Base Salary
$150k - $180k/yr
Responsibilities
- Lead and mature the organization’s secure software development lifecycle and secure-by-design practices.
- Perform application security reviews, threat modeling, secure architecture assessments, and source code reviews.
- Integrate and optimize SAST, DAST, SCA, API scanning, and infrastructure-as-code scanning within Azure DevOps pipelines.
- Manage vulnerability ingestion, triage, prioritization, remediation tracking, reporting, dashboards, and remediation SLA metrics.
- Administer, tune, and improve application security tools including Snyk, SonarQube, Azure DevOps, and PowerShell scanning tools.
- Create scripts and integrations to normalize findings across security tools and develop custom detection rules where needed.
- Collaborate with cloud and infrastructure teams to secure Azure-hosted applications, services, and low-code/no-code platforms.
- Establish a Security Champions program and provide developers with training, workshops, secure coding guidance, mentoring, and DevSecOps support.
Requirements
- At least 5 years of experience in Application Security, Product Security, DevSecOps, or Software Engineering.
- Hands-on experience securing CI/CD pipelines and modern development workflows.
- Experience working directly with development teams in agile environments.
- Strong understanding of secure coding principles, OWASP Top 10, secure SDLC practices, threat modeling, and vulnerability management.
- Experience with several of Azure DevOps, Azure cloud services, Snyk, SonarQube, Containers/Kubernetes, PowerShell, Python, .NET, JavaScript, React, and PHP.
- Experience integrating security tooling into CI/CD pipelines and analyzing scanner results to distinguish meaningful risk from low-value findings.
- Strong scripting, automation, communication, and collaboration skills.
Benefits
- Full-time position eligible for 401(k) retirement savings, medical, dental, vision, disability, and life insurance benefits.
- 401(k) match and generous paid time off plan.
- Professional development and career advancement opportunities.
- Corporate discount plans and other employee benefits.
Tech Stack
Categories
About Wilson Elser - Business & Legal Professionals
Wilson Elser is a U.S. defense litigation law firm serving insurers, corporations, and professionals with trial, coverage, employment, cybersecurity, and complex tort work. Founded in 1978 and headquartered in New York, the partnership operates 40+ offices nationwide. It is an Am Law 100 firm focused on insurance and reinsurance defense and related commercial litigation, with matters across local, state, and federal courts.