Application Security Engineer

Southern New Hampshire University

2d•$94,130 - $150,634•Remote

About The Position

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us — and helped us grow a team that now serves over 180,000 learners worldwide. Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we're ready to expand our reach. All we need is you. Make an impact — from near or far At SNHU, you'll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming. We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states. The opportunity The Security Engineer Application Security (DevSecOps) will report directly to the Director of Information Security Engineering. You will be a mid‑level individual contributor responsible for partnering with development teams to embed security into the software delivery lifecycle. You will partner with application, platform, and DevOps teams to design, implement, and operate security controls that protect enterprise applications, APIs, SaaS platforms, data, and users. You will operate independently on well-defined problem spaces, owns application level security outcomes for assigned services, and escalates architectural or enterprise wide decisions to security architects and leadership. You will work remotely from any of our approved states. #LI-Remote

Requirements

5+ years in IT or Cybersecurity.
2+ years in Application Security Engineering or DevSecOps.
Experience with threat modeling, AppSec reviews, and CI/CD security integration.
Experience reviewing application logic and data flows for security issues, with the ability to read and interpret source code.
Experience with secure coding practices and common application/API vulnerabilities.
Experience with application security testing and automation tools.
Experience with networking fundamentals (TCP/IP, DNS, HTTP/S).
Experience with scripting or automation (e.g., Python, PowerShell, Bash).
Solid understanding of API security concepts and controls.

Responsibilities

Perform threat modeling (e.g., OWASP Top 10) and application/API security reviews; provide clear, relevant remediation guidance.
Design and validate application and API security controls, including authentication, authorization, encryption, and input validation.
Design and review security controls for cloud-native applications, including containerized workloads and managed cloud services.
Integrate security tooling into CI/CD pipelines (SAST, DAST, SCA, secrets, IaC scanning); implement policy-as-code and pipeline gating.
Review application source code to identify security vulnerabilities and collaborate with developers to remediate findings.
Establish and automate secure configuration baselines, drift detection, and security monitoring to support Security Operations.
Validate vulnerabilities, reduce false positives, and guide teams toward pragmatic remediation and compensating controls.
Serve as a trusted security partner to developers through guidance, reusable patterns, and enablement.