Sr Application Security Engineer

About the role

For our client, we are seeking a Sr Application Security Engineer to join the team of a leader in the Finance & Insurance space. This role will help strengthen secure software development practices across the organization by partnering closely with engineering and product teams. The position will focus on identifying application risk, improving code-level security controls, and advancing automation within the secure SDLC. You will also support broader security enablement efforts that help teams build and release software with greater confidence. Location: Remote - US based candidates only, no visa sponsorship available.

Responsibilities

• Lead manual code reviews focused on business logic, access control, and data protection risks
• Guide application security testing using SAST, DAST, and SCA methodologies
• Support the Security Champions program through coaching and secure coding resources
• Enhance automated code review processes and CI/CD security checks
• Embed secure SDLC practices with engineering and product teams throughout the development lifecycle
• Draft clear vulnerability reports detailing risks and remediation steps
• Evaluate AI-assisted tooling to optimize code review and secure development workflows

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent relevant experience
• 5-7+ years of hands-on application security or secure software engineering experience
• Experience integrating security tooling into CI/CD pipelines
• Familiarity with conducting secure code review using OWASP Top 10 and web testing methodologies
• Strong technical report writing and communication skills

Benefits

• Medical, dental, and vision insurance
• Generous earned time off
• 401(k) and student loan repayment options
• Life insurance and AD&D insurance
• Tuition reimbursement and performance-based incentives

Pay

$135,000 – $150,000 annually