Senior Application Security Engineer

Packsize•Salt Lake City, UT

6d•Remote

About The Position

We are seeking a skilled Developer Security Operations Engineer to join our security team and help integrate security best practices throughout the software development lifecycle (SDLC). This role focuses on embedding security into development processes, managing secure coding standards, and collaborating with engineering teams to ensure applications are resilient against threats. The ideal candidate will have 3–5 years of application security experience and a strong understanding of SDLC management.

Requirements

3–5 years of application security experience with a strong understanding of SDLC management.
Familiarity with secure coding standards (e.g., OWASP Top 10) and threat modeling.
Experience with application security tools (SAST, DAST, SCA) and CI/CD pipelines.
Strong communication skills and ability to collaborate across technical teams.

Nice To Haves

Bachelor’s degree in Computer Science, Cybersecurity, or related field preferred (not required).

Responsibilities

Secure Development Integration Partner with development teams to integrate security controls into the SDLC.
Review and enhance secure coding practices and guidelines.
Conduct code reviews and provide remediation guidance for vulnerabilities.
Application Security Management Implement and maintain application security tools (e.g., SAST, DAST, dependency scanning).
Monitor and manage vulnerabilities across applications and development pipelines.
Collaborate with DevOps teams to ensure secure CI/CD practices.
Security Operations Support Assist in incident response related to application vulnerabilities.
Develop and maintain security playbooks for application-related incidents.
Provide technical expertise during security assessments and audits.
Collaboration & Training Educate developers on secure coding principles and threat modeling.
Work closely with product and engineering teams to align security requirements with business goals.
Advocate for security automation and continuous improvement in development workflows.