Application Security Engineer (REMOTE)

Role Overview

Application Security Engineer (REMOTE) responsible for strengthening the security of applications, platforms, and development processes. You will partner with software engineers, DevOps teams, and security professionals to embed security throughout the software development lifecycle (SDLC).

Responsibilities

• Act as a liaison between Cybersecurity and development teams to integrate security into design, development, deployment, and operations
• Perform application security assessments, code reviews, API testing, threat modeling, and penetration testing
• Define, maintain, and enforce secure coding standards and best practices
• Integrate and manage security tooling in CI/CD pipelines, including:
  • SAST, DAST, SCA, IaC scanning, and container security
• Support secure architecture reviews for cloud-native applications, microservices, and containerized workloads
• Conduct/assist with risk assessments and security architecture reviews
• Ensure security practices meet regulatory and compliance requirements
• Deliver cybersecurity training to development teams to improve security awareness and adherence
• Align application security practices with frameworks such as NIST CSF, ISO 27001, and IEC 62443
• Monitor and respond to application security threats, incidents, and vulnerabilities
• Incorporate threat intelligence and stay current with emerging threats and regulatory changes
• Manage and maintain relationships with third-party vendors and consultants

Requirements

• Bachelor’s degree in a technical field (e.g., Computer Science, Information Systems, Cybersecurity)
• 5+ years in Information Security, with at least 3 years focused on application security, secure development, or DevSecOps
• Must have an active passport and be willing to travel internationally

Nice-to-haves

• Experience with compliance/security frameworks such as NIST CSF, ISO 27001, and IEC 62443
• Experience integrating application security tools into CI/CD and performing security reviews for cloud-native/microservices environments