Cybersecurity - Security Engineer Sr.

Confidential is seeking a Senior Application Security Engineer to support enterprise application security initiatives focused on ASPM, vulnerability analysis, policy implementation, and developer enablement. The role administers security platforms, guides development teams on secure coding and remediation, and supports secure SDLC and DevSecOps practices.

Responsibilities:

• Administer and support Application Security Posture Management (ASPM) platforms and security tooling
• Create and tune security policies that determine when vulnerabilities should be escalated, ticketed, suppressed, or prioritized
• Analyze and validate SAST and SCA findings, including root cause analysis and false-positive identification
• Partner with development teams to provide secure coding guidance and remediation recommendations
• Support secure SDLC initiatives and DevSecOps practices across application development teams
• Assist with platform escalations, vulnerability triage, and security operations activities
• Leverage automation, APIs, and AI-assisted workflows to improve application security operations
• Collaborate with cross-functional teams to strengthen security controls throughout the development lifecycle

Requirements:

• 6-10 years of cybersecurity or application security experience
• CISSP certification
• Deep understanding of Secure SDLC and application security principles
• Experience with Application Security Posture Management (ASPM) platforms or similar vulnerability management technologies
• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• API Security Testing
• DAST
• Infrastructure-as-Code (IaC) Security
• Mobile Security Testing
• Ability to read and understand code for vulnerability analysis and root cause identification
• Experience identifying false positives and validating security findings
• Familiarity with DevSecOps practices, CI/CD pipelines, and automated security controls
• more than six years preferred
• Experience integrating and optimizing AppSec tools and platforms
• Scripting and security workflow automation experience
• Experience using AI-driven security analysis and policy enforcement capabilities
• GWEB, GWAPT, CSSLP, or equivalent application security certifications