Application Security Engineer

TEKsystems•Dearborn, MI

3d•$70 - $75•Remote

About The Position

This role focuses on advanced threat analysis, security operations, penetration testing, stakeholder engagement, incident lifecycle management, DevSecOps & Identity, and cryptographic governance. The engineer will execute threat modeling, analyze intelligence data, manage the penetration testing lifecycle, translate vulnerability data into business risk, lead incident triage and remediation, drive automated security scans and MFA solutions, and architect encryption standards.

Requirements

Application Security (AppSec)
Secure Software Development Lifecycle (SSDLC)
Vulnerability Management & Remediation
Cloud Security (AWS)
CNAPP, CSPM, ASPM, DSPM
Vulnerability Research & Reverse Engineering
Python and C Programming
Infrastructure as Code (IaC) Security
Security Compliance (SOC 2, PCI DSS)
Endpoint Detection & Response (CrowdStrike)
Penetration Testing
Agile Methodologies

Nice To Haves

Experience leading application security initiatives and improving enterprise security posture.
Strong experience building and managing vulnerability management programs.
Hands-on experience implementing cloud security solutions and controls.
Ability to partner with development teams to integrate security through

Responsibilities

Execute threat modeling and attack vector analysis to quantify risk.
Analyze global intelligence data to inform security protocols and architectural standards.
Utilize advanced monitoring tools to track operational performance and security threats, emphasizing the automation of system health and compliance checks.
Manage the full penetration testing lifecycle, including scoping, execution (ethical hacking), and reporting of high-impact remediation measures.
Translate complex vulnerability data into business risk for non-technical stakeholders, providing cost-benefit analysis for proposed security controls.
Lead the triage and remediation of security incidents, coordinating across teams to mitigate the impact of cyber and insider threats.
Drive the deployment of automated security scans and MFA solutions; interface with development teams to integrate security into full-stack deployments.
Architect and implement encryption standards and procedures for a multi-platform, diverse systems environment.