AppSec Engineer
About The Position
Bright Vision Technologies is seeking an AppSec Engineer to embed security throughout the software development lifecycle. The engineer will partner with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across the application portfolio. The role combines hands-on offensive and defensive security work with communication and collaboration to help teams build secure software efficiently. The ideal candidate has technical security expertise, software engineering fundamentals, and a record of delivering security improvements that reduce production risk. This is a full-time, direct W2 position that is 100% remote in the United States. The listed salary range is $80,000–$100,000 annually. Candidates who are U.S. citizens, Green Card holders, EAD holders, or seeking an H-1B transfer are encouraged to apply; the company cannot sponsor new H-1B visa petitions for this position.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- Five or more years of application security or security engineering experience.
- Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
- Hands-on code review experience across at least two major languages.
- Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling.
- Strong understanding of authentication, authorization, and cryptographic primitives.
- Experience with cloud security and modern infrastructure controls.
- Strong communication skills with technical and non-technical audiences.
- Proficiency in at least one programming language for tooling and automation.
- Experience working closely with engineering teams in an Agile environment.
Nice To Haves
- Industry certifications such as OSCP, OSCE, GWAPT, or CISSP.
- Experience with offensive security tooling and red-team operations.
- Bug bounty experience, public CVEs, or open-source security contributions.
- Familiarity with AI/LLM application security considerations.
- Exposure to regulated industries with strict compliance requirements.
Responsibilities
- Embed security throughout the software development lifecycle.
- Partner with engineering teams to design secure systems.
- Identify vulnerabilities and reduce risk across the application portfolio.
- Perform code reviews and use security tooling integrated with CI/CD.
- Help development teams build secure software efficiently.
- Deliver security improvements that meaningfully reduce production risk.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
