Application Security Engineer - Remote

About the Role

We are seeking a skilled Application Security Engineer - Remote to join our dynamic team. In this role, you will play a crucial part in enhancing our security posture by implementing secure development practices and conducting thorough vulnerability assessments. As an Application Security Engineer, you will work closely with development teams to ensure that security is integrated into the software development lifecycle (SDLC).

What You'll Do

• Conduct security assessments and penetration testing on applications to identify vulnerabilities.
• Collaborate with development teams to integrate security best practices into the SDLC.
• Develop and maintain security testing frameworks and tools.
• Provide guidance on secure coding practices and threat modeling.
• Monitor and analyze security incidents and provide remediation strategies.
• Stay updated on the latest security threats and trends to proactively address potential risks.

Requirements

• 3+ years of experience as an Application Security Engineer or similar role.
• Strong knowledge of secure SDLC, vulnerability management, and penetration testing.
• Proficiency in programming languages such as Python, Go, Scala, C/C++, JavaScript, and TypeScript.
• Experience with CI/CD pipelines and cloud platforms (AWS, GCP, Azure).
• Familiarity with security tools such as OWASP, Burp Suite, and Web Application Firewalls (WAF).

Nice to Have

• Certifications such as CISSP, CEH, or OSCP.
• Experience with DevSecOps practices.
• Knowledge of API security and DDoS protection strategies.

What We Offer

• Competitive salary range of $120,000 - $150,000 per year.
• Bonus potential and equity options.
• Comprehensive benefits package including health, dental, and vision insurance.
• Inclusive company culture that values diversity and collaboration.
• Opportunities for professional growth and development.