Application Security Engineer
About The Position
The Application Security Engineer serves as the security leader within the software development organization, embedding security throughout the software development lifecycle. The role partners with software engineers, architects, security teams, risk management, compliance, internal audit, and business stakeholders to help ensure applications are designed, developed, and maintained securely. Responsibilities combine technical work—including vulnerability management, penetration testing oversight, secure code reviews, security architecture reviews, and vendor software assessments—with strategic work such as developer education, secure coding governance, and application security program maturation. The engineer evaluates and administers application security testing tools, interprets findings, and works with development teams to remediate vulnerabilities before production. The position also establishes secure coding standards, delivers training, advises on secure design, and supports audits, regulatory requirements, and incident response activities. The role focuses on application security and Secure Software Development Lifecycle leadership rather than traditional infrastructure security. Success is measured by reducing application vulnerabilities, improving developer security awareness, standardizing secure development practices, strengthening security controls in software design, and building a sustainable program to protect sensitive customer, insurance, healthcare, and financial data. The position is permanent and hybrid in Oklahoma City, Oklahoma.
Requirements
- Application security expertise.
- Vulnerability management expertise.
Responsibilities
- Lead secure coding initiatives and establish secure coding standards.
- Administer vulnerability scanning and penetration testing tools, interpret findings, and partner with developers to remediate vulnerabilities.
- Review application code for security issues.
- Train developers on secure development practices and provide security awareness sessions.
- Conduct application architecture and design reviews and advise teams on secure design principles.
- Evaluate third-party and vendor-supported software from a security perspective.
- Support audits and regulatory activities.
- Participate in incident response investigations.
- Help mature the organization's Secure Software Development Lifecycle and application security program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
