Role OverviewAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. We are looking for a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams.
What You Will Do
Deploy and tune code scanning solutions such as SAST, DAST, and IAST. Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities. Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.
Why It Might Be a Fit
You will be part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products. You will collaborate with technology stakeholders to establish metrics that demonstrate application security proficiency across all engineering teams.
Requirements
- Authorized to work for ANY employer in the US
- Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
- Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages
- Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus
- Demonstrated experience conducting threat modeling and translating findings into practical security requirements
- Experience integrating security testing and controls into CI/CD pipelines and developer workflows
- Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
- Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
- Ability to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities
- Strong communication and influence skills: able to explain complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders
- Collaborative, solutions-oriented approach; must be able to build trust with development teams and improve security without unnecessarily slowing product delivery
- Upper-intermediate English level
Benefits
- Professional growth: Accelerate your professional journey with mentorship, TechTalks, and personalized growth roadmaps
- Competitive compensation: We match your ever-growing skills, talent, and contributions with competitive USD-based compensation and budgets for education, fitness, and team activities
- A selection of exciting projects: Join projects with modern solutions development and top-tier clients that include Fortune 500 enterprises and leading product brands
- Flextime: Tailor your schedule for an optimal work-life balance, by having the options of working from home and going to the office – whatever makes you the happiest and most productive
]]>