Top Application Security Engineer Jobs

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

The Application Security Engineer integrates security into software development, establishing secure coding practices and protecting applications across various platforms and systems.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

The Application Security Engineer integrates security into software development by establishing secure coding practices and collaborating on secure application architecture across various platforms.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead application security efforts across product and platform teams by performing security assessments, vulnerability testing, code reviews, threat modeling, and CI/CD integration. Collaborate with SRE, development, IT, and risk teams to remediate vulnerabilities, implement secure coding practices, provide training, and drive security process improvements. Mentor engineers and stay current on threat techniques and protective controls.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Lead application security efforts: perform automated and manual analyses (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers on secure design and remediation, lead threat modeling and documentation. Work on mission-critical DoD software; must be U.S. citizen and able to obtain DoD Secret clearance.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead threat modeling, secure design reviews, penetration testing and deep code review for Unity products. Build and operate security automation and AI-assisted tooling, secure AI/LLM integrations and agentic systems, drive remediation with engineering teams, investigate AppSec incidents, and contribute to the secure development lifecycle and compliance.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Lead development and maturation of the Application Security program. Maintain and integrate appsec testing platforms, review and triage scan results, produce metrics, mentor development teams, monitor CVEs, and coordinate with Audit, Governance, and Compliance to improve security posture.

Lead application security engineer responsible for designing and implementing Zero Trust application and network security across enterprise/DoD environments. Develop and troubleshoot network infrastructure, integrate security controls (firewalls, application delivery, micro-segmentation), improve reliability and availability, lead cross-functional teams, and ensure compliance with DoD/ federal security requirements. Requires Secret clearance.

Lead application security for an AI-native enterprise coaching platform: review code and architecture, threat model, perform manual pentests, build security tooling, advise DevOps on infrastructure security, support incident response and SOC processes, and handle client-facing security needs.

Lead application and product security across web, mobile, API, AI/CV, and cloud-native systems. Drive secure SDLC, DevSecOps, CI/CD and supply chain security, threat modeling, tooling/automation, vulnerability remediation, and developer enablement while partnering closely with engineering teams.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security tests into CI/CD and cloud pipelines, triage and deduplicate findings, support developers in remediation, evangelize secure development practices, and coach junior engineers.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security into CI/CD and cloud workflows, triage findings, support developers on remediation, produce security reports, evangelize secure development practices, and coach junior engineers to scale DevSecOps across the organization.

Serve as a technical AppSec expert to identify, validate, and reduce application security risk via SAST/DAST/SCA and manual testing, threat modeling, secure design reviews, CI/CD tool integration, remediation validation, and security enablement across development teams.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Support and improve application security by implementing and operating SAST/DAST, API and container security solutions; triage and resolve security issues; collaborate with dev and product teams; participate in on-call rotation; drive projects to completion and integrate security into DevSecOps practices.