Application Security Engineer, Information Technology

ServiceLink•Plano, TX

1d•$90,000 - $110,000•Hybrid

About The Position

ServiceLink is hiring an Application Security Engineer to partner with security engineers, software developers, and architects to identify vulnerabilities, recommend improvements, and strengthen security across applications and infrastructure. The role calls for a deep technical understanding of security defects, development skills, knowledge of popular platforms and languages, and the ability to learn quickly. Experience in security consulting, penetration testing, and general hacking is important, along with a drive to improve security overall. This is a hybrid role requiring work in ServiceLink’s Plano, Texas office at least three days per week. Candidates must live within reasonable commuting distance and be willing to work in the office regularly. Applicants must be authorized to work full-time in the United States without requiring employment visa sponsorship now or in the future.

Requirements

Bachelor of Science in Computer Science, Mathematics, or Engineering, or equivalent experience or education.
At least 5 years of hands-on security experience, with demonstrated mastery of multiple classes of security defects.
Demonstrated coding skills in one or more popular languages and platforms, including C#, SQL, and Python.
Experience with the .NET Core framework.
Understanding of cloud computing platforms and cloud-based infrastructure design and operation.
Understanding of container technologies, security, and tooling, such as Docker, Kubernetes, and Helm.
Understanding of networking, routing, and web-related protocols.
Must be currently authorized to work in the United States full-time and must not require employment visa sponsorship now or in the future.
Must be located within reasonable commuting distance of the Plano, Texas office and willing to work there at least three days per week.

Nice To Haves

Experience with Microsoft Azure.
Experience with container security platforms.
Experience with continuous integration and delivery (CI/CD) tooling.
Current security certification, such as OSCP or OSEE.

Responsibilities

Develop security documentation, training, and guidance for internal infrastructure and engineering teams.
Consult with internal teams on architecture and threat modeling; review systems and infrastructure to identify vulnerabilities and architectural weaknesses, recommend improvements, and help drive implementation.
Perform penetration testing to examine target systems for vulnerabilities and weaknesses.
Research and analyze vulnerabilities and emerging threats, including proactive security research on technologies in use.
Identify and implement technical and process improvements to security.
Define and own metrics to assess the effectiveness of security controls.
Harden infrastructure platforms, deployment code, and images.
Architect, build, automate, and operate security controls, tools, and review capabilities to detect vulnerabilities across applications and services.
Promote security culture and excellence, apply risk-based judgment, and prioritize remediation work.
Perform other duties as assigned.