Senior IT Application Security Engineer

100% Remote - Direct Hire/Fulltime - NO (Sponsorship, Corp-to-Corp, H1B, OPT, EAD)

CBTS is searching for a Sr. IT Application Security Engineer. The Senior IT Application Security Engineer is recognized as a subject matter expert in secure application design, threat modeling, and secure coding practices. You will assist software development teams in designing, creating, and implementing secure solutions by ensuring that security checks are followed throughout each phase of the software development life cycle (SDLC). You are expected to take a proactive leadership role in driving application security initiatives and define, communicate, and enforce application security standards across the organization. You will lead opportunities to enhance security processes and mentor team members by sharing your expertise. You will also identify security knowledge gaps and present training to IT stakeholders. Additionally, you will champion efforts to advance the maturity of the application security program to help foster a culture of continuous improvement.

Responsibilities:

• Develop and provide presentations on application security topics to both technical and non-technical audiences.
• Advise executive leadership on current and evolving threats to enable risk-informed decisions.
• Mentor members of the information security team on matters of application security.
• Facilitate third-party penetration tests, triage findings, and create remediation plans with development teams.
• Provide tailored remediation guidance to software developers to address security findings.
• Provide architectural and security guidance for third-party platforms and services as they integrate into our environments and/or code.
• Review the security of third-party/open-source software used by CBTS.
• Provide risk-based analysis of security posture to drive business decisions.

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Foster relationships with key business partners to create a culture of security and achieve prioritization of security initiatives.
• Develop internal security tooling for identifying or remediating security risks.
• Assist/lead on matters of application security in the event of an incident.
• This job profile is not meant to be all inclusive of the responsibilities of this position. May perform other duties as assigned or required.

Requirements:

• Bachelor's degree or above in Computer Science, Information Security, or related field.
• At least four years of professional experience, with at least two years in a security field and at least one year with direct experience writing code.
• Familiar with object-oriented programming and have written code in one or more programming languages (e.g. C#, Java, C++).
• Agile/Scrum, SAFe, or Lean certification preferred.
• Familiarity with secure coding best practices such as the OWASP Top 10.
• Knowledge of common application architectures and the relative risks associated with them (e.g. single page apps, client-server, native mobile, microservices).
• Foundational knowledge of security practices in several applied contexts, e.g. networking, cloud infrastructure, containerization, operations, audit, or governance.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Knowledge of relevant technology, tools, databases, and development techniques.
• Strong focus on team dynamics and interpersonal relationships.
• Strong sense of task ownership with consistent follow-through.
• Ability to anticipate risks and devise solutions with limited information or context.
• Excellent project management, organization, and team collaboration skills.
• Curiosity to learn.
• Capable of defining and measuring key performance indicators.
• Able to work cross-functionally with IT and business partners across all areas of CBTS and vendor partners.
• Adaptive, flexible, and responsive to challenges.
• Awareness of how security controls influence both internal stakeholders and CBTS customers.
• SANS/GIAC, CompTIA, ISC2 (e.g. CISSP) or other applicable industry certifications preferred.

CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.