RemoteLeaf Logo
Log in Sign up

Application Security Engineer

3 months, 1 week ago
United States
Full-time
Mid Level
Application Security Engineer
Cybersecurity
AWS CI/CD Docker GitHub Actions GitLab CI GraphQL Jenkins Kubernetes REST API
Apply Now
Arcadia Towers

Arcadia Towers

Arcadia Towers LLC is a cell tower company that develops, owns, and operates wireless communications towers across the U.S. They provide innovative solutions for wireless infrastructure development, connecting communities today and for the future. Arca...

Real Estate
1-10
Founded 2005
View All Jobs 4

Description

  • Own the end-to-end vulnerability management lifecycle across SAST, DAST, and SCA findings.
  • Triage, prioritize, and drive remediation efforts in partnership with engineering squads.
  • Maintain, optimize, and extend security automation and tooling integrations in the CI/CD pipeline.
  • Launch and run a Security Champions program with workshops and office hours across distributed teams.
  • Serve as the application-layer subject matter expert during security incidents, including triage, root cause analysis, and remediation.
  • Partner with Product and Engineering leadership to add security earlier in the SDLC through threat modeling and design reviews.
  • Act as a trusted advisor to engineers and help communicate security risks in a way that drives action.
  • Support the engineering organization by embedding security practices into day-to-day development workflows.

Requirements

  • 3–5 years of dedicated Application Security experience in a SaaS or cloud-native environment.
  • Hands-on proficiency with at least two of the following: SAST, DAST, SCA, or CSPM tooling such as Snyk, Checkmarx, Semgrep, or Wiz.
  • Strong working knowledge of CI/CD pipelines such as GitHub Actions, Jenkins, or GitLab CI, with the ability to write and maintain integrations.
  • Experience with container security using Docker and Kubernetes.
  • Experience with API security patterns including REST and GraphQL.
  • Ability to communicate technical risk to non-security engineers in a clear, action-oriented way.
  • Experience standing up or maturing a Security Champions program is preferred.
  • Familiarity with AWS security services such as GuardDuty, Security Hub, and IAM Access Analyzer is preferred.
  • Exposure to threat modeling frameworks such as STRIDE, PASTA, or similar lightweight methods is preferred.
  • Relevant certifications such as OSCP, GWAPT, or CSSLP are valued but not required.
  • Ability to work remotely from anywhere in the US with a reliable internet connection.
  • Visa sponsorship is not available for this position.

Benefits

  • Remote-first work environment with the flexibility to work anywhere in the US.
  • Flexible PTO with no accrued hours and no limit on vacation days for exempt employees.
  • 12 annual holidays and 10 days of sick leave.
  • Up to 4 weeks of bereavement leave.
  • 2 volunteer days off and 2 professional development days off.
  • 12 weeks of paid parental leave for all parents.
  • Medical, dental, and vision coverage with 75–95% employer cost coverage for employees and dependents.
  • Competitive target annual compensation of $131,250 to $235,156 plus equity and bonus potential.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cato Networks

DevSecOps

Cato Networks 251-1K Diversified Telecommunication Services

Cato Networks is hiring an Application Security Engineer (DevSecOps) to embed security across its cloud-based software development lifecycle and help R&D teams deliver secure applications at scale.

Israel Mid Level Application Security Engineer
Agile AWS CI/CD DevSecOps Docker Go Java Kubernetes Microservices Network Security Python Terraform
1 day, 16 hours ago
Huntress

Manager, Product Research

Huntress 251-1K Professional Services

Huntress is hiring a remote US Product Research Manager to lead cybersecurity research efforts that improve threat detection and prevention for customers.

United States Full-time Lead Application Security Engineer Product Manager
$195k-$225k
Cybersecurity
4 days, 17 hours ago
Zeta Global

Lead Application Security Engineer

Zeta Global 1K-5K Media

Zeta Global is hiring a Lead Application Security Engineer to strengthen application and platform security across its AI-powered marketing platforms through automated, AI-native security practices and cross-functional security engineering.

United States Full-time Lead Application Security Engineer
$140k-$180k
AWS Azure Burp Suite CI/CD Cybersecurity DevSecOps Django Docker FastAPI GCP JWT Kubernetes Microservices Node.js OAuth OpenID Connect React SonarQube
5 days, 16 hours ago
Anaplan

Principal Security Architect (Product Security)

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Senior Security Architecture IC to define and drive secure-by-design architecture across its enterprise planning platform and AI products.

United Kingdom Lead Application Security Engineer
Encryption Machine Learning OWASP
1 week, 1 day ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers