Top Remote Application Security Engineer Jobs

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Own application security across cloud services, APIs, data pipelines, and edge-deployed applications. Lead threat modeling, secure design reviews, code reviews, vulnerability assessments, and remediation. Build CI/CD security tooling, automation, and secure-by-default developer frameworks while maturing the SDLC, supply-chain security, vulnerability disclosure, and bug bounty processes. Partner with engineering and security operations, provide incident expertise, and deliver developer security training.

Secure AI and cloud-native applications by embedding controls into the Secure SDLC, CI/CD pipelines, Kubernetes environments, APIs, and software supply chains. Lead threat modeling, secure design reviews, vulnerability remediation, container hardening, runtime policy enforcement, and AI/ML workload protection. Partner with engineering teams to establish secure coding standards and improve enterprise security posture.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

The Security Engineer role involves identifying vulnerabilities, automating tasks in penetration testing, and creating security reports for various audiences.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.