Senior Application Security Engineer ID87004

AgileEngine • Baltimore, MD

3d

About The Position

AgileEngine is hiring a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. The role deploys and tunes SAST, DAST, and IAST tools, conducts threat modeling, and integrates security controls into CI/CD pipelines. The engineer should be comfortable working with Python, JavaScript, or Java and cloud infrastructure such as AWS.

The position is part of a security organization that enables agile development of secure and reliable applications and products. It involves interpreting scan results to focus remediation on high-risk vulnerabilities, identifying application threat vectors, establishing security metrics with technology stakeholders, and developing automation to make security improvements faster and easier for engineering teams. The role also ensures processes for key systems are documented, maintained, and archived.

Applicants must be authorized to work for any employer in the United States; the company cannot sponsor or take over employment visa sponsorship at this time. The role offers flexible scheduling with remote and office options, professional growth resources, USD-based compensation, and budgets for education, fitness, and team activities.

Requirements

• At least 4 years of hands-on application security experience in a modern software-development environment.
• A software engineering foundation, including the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages.
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus.
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements.
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
• Working knowledge of AWS or cloud application security, APIs, authentication and authorization, secrets management, and common web-application vulnerabilities.
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
• Ability to prioritize genuine security risks, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities.
• Strong communication and influence skills, including explaining complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders.
• Collaborative, solutions-oriented approach and ability to build trust with development teams while improving security without unnecessarily slowing product delivery.
• Upper-intermediate English level.
• Authorization to work for any employer in the United States; visa sponsorship or transfer is not available.

Nice To Haves

• Familiarity with security tools such as Nessus, Burp, and web application firewalls.
• Experience with Static/Dynamic Application Security Testing methodologies and tools.
• Experience conducting a detailed threat model exercise.
• Experience assessing CI/CD pipelines from a security perspective and integrating security tools with them.
• Experience working with cloud-based infrastructure and technologies, preferably AWS.
• Collaborative approach to partnering across engineering to establish a security posture.
• Results-oriented mindset and commitment to continuous improvement.
• Curiosity and interest in discovering underlying causes.
• Effective communication and a solution-oriented mindset.
• Strategic thinking focused on integrating current initiatives and identifying improvements while meeting business needs.
• Experience with automation tools such as Terraform, Puppet, Chef, Salt, Ansible, or CloudFormation.

Responsibilities

• Deploy and tune code-scanning solutions, including SAST, DAST, and IAST.
• Interpret scan results and focus teams on remediating the highest-risk vulnerabilities.
• Conduct application threat modeling to identify threat vectors that could cause disruption or a potential data breach.
• Collaborate with technology stakeholders to establish metrics demonstrating application security proficiency across engineering teams.
• Steer development of automation and other tools that improve application security and make security gains faster and easier for teams.
• Ensure processes associated with key systems are documented, maintained, and archived.

Benefits

• Mentorship, TechTalks, and personalized growth roadmaps.
• USD-based compensation.
• Education, fitness, and team activity budgets.
• Exciting projects with modern solutions for Fortune 500 and top product companies.
• Flexible schedule with remote and office options.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed