Top Remote Application Security Engineer Jobs

The Security Engineer role involves identifying vulnerabilities, automating tasks in penetration testing, and creating security reports for various audiences.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Lead Apollo’s application security strategy across engineering, product, platform, data, and AI teams. Responsibilities include security architecture reviews, threat modeling, secure code review, penetration testing, exploit development, vulnerability management, secure-by-default building blocks, AI security standards, automation, and mentoring security engineers and champions. The role requires solving ambiguous, high-scale AppSec problems, influencing cross-functional roadmaps, and delivering measurable reductions in security risk.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead enterprise application security and DevSecOps initiatives across a strategic healthcare application portfolio. Implement automated security controls, testing, policy enforcement, and self-service capabilities in software delivery pipelines. Drive cloud, container, mobile, infrastructure-as-code, software supply chain, and vulnerability management programs using modern security platforms. Provide architecture guidance, mentor engineers, standardize security practices, lead platform implementations, and communicate security outcomes and risk posture to senior stakeholders.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Leads application security testing across the software development lifecycle, identifying vulnerabilities and secure coding weaknesses through SAST, DAST, SCA, threat modeling, penetration testing, and API assessments. Recommends remediation, communicates risks, automates security processes, and supports secure design across applications, cloud environments, vendors, and third-party solutions. Leads AI security initiatives involving LLM threat modeling and supply-chain reviews, trains developers, and monitors emerging security threats.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Own the application security program strategy, roadmap, architecture standards, tooling, threat modeling, security champions program, and developer training. Integrate security tools into CI/CD pipelines, manage findings and remediation, coordinate penetration testing, maintain audit evidence, and report risk and program metrics to leadership. Operate autonomously while influencing development, infrastructure security, IT leadership, and external vendors. Support secure AI adoption and risk-based security decisions across the organization.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, incident response, and compliance evidence. Partner with developers, vendors, cloud teams, and compliance stakeholders to close critical findings and embed secure delivery practices through automation and security AI tooling.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.

Identify, validate, prioritize, and remediate application and API vulnerabilities across web, cloud, and development environments. Manage SAST and DAST programs, perform manual testing and secure code reviews, conduct threat modeling, assess AWS security configurations, and provide developer-focused remediation guidance. Integrate security testing into CI/CD workflows, automate vulnerability management, track remediation metrics, and collaborate with engineering, cloud, and security teams to improve application security posture.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Develop and mature application security practices through manual code reviews, SAST/DAST and related security tooling, penetration testing, CI/CD automation, threat modeling, and vulnerability reporting. Partner with engineering, cloud, and product teams to implement secure SDLC processes, expand Security Champions programs, secure AI/LLM features, and mentor teams on secure design and coding.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.