Senior Application Security Engineer ID87004

AgileEngine • Orlando, FL

3d

About The Position

AgileEngine is seeking a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. The role deploys and tunes SAST, DAST, and IAST tools, conducts threat modeling, and integrates security controls into CI/CD pipelines. It requires comfort working with Python, JavaScript, or Java and cloud infrastructure such as AWS.

The engineer will help enable the agile development of secure and reliable applications and products, prioritize remediation of high-risk vulnerabilities, collaborate with technology stakeholders to establish application security metrics, and develop automation that makes security improvements faster and easier for teams. Processes associated with key systems must be documented, maintained, and archived.

The position offers flexible scheduling with remote and office options. AgileEngine describes itself as an Inc. 5000 company creating software for Fortune 500 brands and startups across 17+ industries, with a people-first culture and multiple Best Place to Work awards.

Requirements

• Be authorized to work for any employer in the United States; the company is unable to sponsor or take over employment visa sponsorship.
• At least 4 years of hands-on application security experience in a modern software-development environment.
• A software engineering foundation and ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools.
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS or cloud application security, APIs, authentication and authorization, secrets management, and common web-application vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Ability to prioritize genuine security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities.
• Strong communication and influence skills, including the ability to explain complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders.
• Collaborative, solutions-oriented approach and ability to build trust with development teams while improving security without unnecessarily slowing product delivery.
• Upper-intermediate English level.

Nice To Haves

• IAST experience.
• Familiarity with security tools such as Nessus, Burp, and web application firewalls.
• Experience with Static/Dynamic Application Security Testing methodologies and tools.
• Experience conducting a detailed threat model exercise.
• Experience assessing CI/CD pipelines from a security perspective, including integrating security tools with the pipeline.
• Experience working with cloud-based infrastructure and technologies, preferably AWS.
• Ability to partner across the engineering organization to establish a security posture.
• Results-oriented mindset and belief in steady continuous improvement.
• Curiosity and a desire to investigate why things are happening.
• Effective communication and a solution-oriented mindset.
• Strategic thinking that integrates current initiatives and identifies improvements while meeting business needs.

Responsibilities

• Deploy and tune code-scanning solutions such as SAST, DAST, and IAST.
• Interpret code-scanning results and focus teams on remediating the highest-risk vulnerabilities.
• Perform application threat modeling to identify potential threat vectors that could cause disruption or a data breach.
• Collaborate with technology stakeholders to establish metrics demonstrating application security proficiency across engineering teams.
• Steer the development of tools and automation that improve application security and make security gains faster and easier for teams.
• Ensure processes associated with key systems are documented, maintained, and archived.

Benefits

• Mentorship, TechTalks, and personalized growth roadmaps.
• USD-based competitive compensation.
• Education, fitness, and team activity budgets.
• Exciting projects involving modern solutions for Fortune 500 and top product companies.
• Flexible schedule with remote and office options.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed