Application Security Engineer (Remote, US)

Jobgether • United States

Remote

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Seeking an Application Security Engineer to embed security throughout the SDLC in cloud-native environments. This role involves offensive and defensive practices, vulnerability management, and secure design. Requires 5+ years of experience, strong OWASP knowledge, and cloud security expertise.

Key Highlights

Embed security into all stages of the software development lifecycle.

Combine offensive and defensive security practices.

Work with modern cloud-native environments and enterprise-scale systems.

Key Responsibilities

Conduct threat modeling exercises and security architecture reviews for new and existing applications and services.

Perform manual code reviews and collaborate directly with engineering teams to harden applications and improve secure coding practices.

Implement and manage security testing tools including SAST, DAST, IAST, SCA, and secret-scanning solutions integrated into CI/CD pipelines.

Drive vulnerability management processes including triage, prioritization, remediation tracking, and SLA enforcement.

Design and promote secure-by-default frameworks, libraries, and development patterns for engineering teams.

Lead red-team and purple-team exercises to identify application weaknesses and coordinate remediation efforts.

Implement runtime protections such as WAF, RASP, abuse detection, and bot mitigation mechanisms.

Define and enforce secure authentication, authorization, session management, and cryptographic standards.

Partner with infrastructure and platform teams to secure containerized, Kubernetes, and cloud-based environments.

Develop and deliver security awareness training, onboarding materials, and secure development guidance for engineering teams.

Participate in security incident response related to application vulnerabilities and emerging threats.

Maintain comprehensive technical documentation including architecture diagrams, operational procedures, and security standards.

Stay informed on emerging vulnerabilities, exploit techniques, and evolving application security tooling.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

SAST DAST IAST SCA Secret-scanning CI/CD WAF RASP Kubernetes OWASP Top 10

Benefits & Perks

100% remote work opportunity within the continental United States

Competitive compensation package

Full-time direct W2 employment

Comprehensive medical, dental, and vision insurance coverage

H1B transfer support available

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Offensive Security OSCP, OSCE, GWAPT, or CISSP certifications

Familiarity with offensive security operations

Familiarity with bug bounty programs

Familiarity with AI/LLM security risks

Familiarity with regulated environments

Job Description

This role is ideal for a security-focused engineer passionate about embedding security into every stage of the software development lifecycle. You will work closely with engineering, infrastructure, and platform teams to strengthen application security across modern cloud-native environments. The position combines offensive and defensive security practices, allowing you to influence secure design, vulnerability management, and incident response initiatives. You’ll play a key role in improving secure development standards, reducing production risk, and enabling developers to build secure software efficiently. The environment is collaborative, fast-paced, and highly technical, offering opportunities to work on enterprise-scale systems while shaping long-term security strategy and best practices. This fully remote opportunity provides strong career growth and exposure to cutting-edge application security technologies and methodologies.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.