Senior Application Security Engineer
Wilson Elser - Business & Legal Professionals3 hours ago
Base Salary
$150k - $180k/yr
Responsibilities
- Lead and mature the organization’s secure software development lifecycle and secure-by-design practices.
- Perform application security reviews, threat modeling, secure architecture assessments, and source code reviews.
- Integrate and optimize SAST, DAST, SCA, API scanning, and infrastructure-as-code scanning within Azure DevOps pipelines.
- Manage vulnerability ingestion, triage, prioritization, remediation tracking, reporting, dashboards, and remediation SLA metrics.
- Administer, tune, and improve application security tools including Snyk, SonarQube, Azure DevOps, and PowerShell scanning tools.
- Create scripts and integrations to normalize findings across security tools and develop custom detection rules where needed.
- Collaborate with cloud and infrastructure teams to secure Azure-hosted applications, services, and low-code/no-code platforms.
- Establish a Security Champions program and provide developers with training, workshops, secure coding guidance, mentoring, and DevSecOps support.
Requirements
- At least 5 years of experience in Application Security, Product Security, DevSecOps, or Software Engineering.
- Hands-on experience securing CI/CD pipelines and modern development workflows.
- Experience working directly with development teams in agile environments.
- Strong understanding of secure coding principles, OWASP Top 10, secure SDLC practices, threat modeling, and vulnerability management.
- Experience with several of Azure DevOps, Azure cloud services, Snyk, SonarQube, Containers/Kubernetes, PowerShell, Python, .NET, JavaScript, React, and PHP.
- Experience integrating security tooling into CI/CD pipelines and analyzing scanner results to distinguish meaningful risk from low-value findings.
- Strong scripting, automation, communication, and collaboration skills.
Benefits
- Full-time position eligible for 401(k) retirement savings, medical, dental, vision, disability, and life insurance benefits.
- 401(k) match and generous paid time off plan.
- Professional development and career advancement opportunities.
- Corporate discount plans and other employee benefits.
Tech Stack
About Wilson Elser - Business & Legal Professionals
Wilson Elser is the preeminent defense litigation firm in the United States. At any given time, our more than 1,400 attorneys are engaged in some 100,000 defense and coverage matters, with many defending clients in various local, state and federal courts. For more than four decades, our litigation, coverage and trial lawyers have gained a reputation for taking on and prevailing in the most challenging and technical cases, frequently “parachuting in” to assume unresolved matters from other law firms. Our success also derives from winning on our clients’ terms and rigorously adhering to their guidelines. We are ranked 94 in the AmLaw 100 and 30 in the National Law Journal’s NLJ 500.