Role OverviewAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups. We are looking for a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams.
What You Will Do
Deploy and tune code scanning solutions, interpret code scanning results, perform threat modeling, collaborate with technology stakeholders, steer the development of tools to improve application security, and ensure processes are documented and maintained.
Why It Might Be a Fit
You will be part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products. You must be able to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities.
Requirements
- Authorized to work for ANY employer in the US
- Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
- Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages
- Deep experience deploying, tuning, and interpreting SAST and DAST tools
- Demonstrated experience conducting threat modeling and translating findings into practical security requirements
- Experience integrating security testing and controls into CI/CD pipelines and developer workflows
- Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
- Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
- Upper-intermediate English level
Benefits
- Professional growth
- Competitive compensation
- Flextime
- A selection of exciting projects
]]>