RemoteLeaf Logo
Log in Sign up

Senior Application Security Engineer

1 hour, 4 minutes ago
United States
Full-time
Senior
Application Security Engineer
Cybersecurity
AWS C++ Java JavaScript Penetration Testing PHP PowerShell Python Ruby
Apply Now
ClearCapital.com,

ClearCapital.com,

Clear Capital is a real estate valuation technology company that provides valuation services, data and analytics tools, and a full suite of appraisal services. They offer intelligent valuation solutions for properties nationwide, serving the mortgage a...

Real Estate
1-10
View All Jobs

Description

  • Plan and perform application security testing throughout the software development lifecycle to identify vulnerabilities and secure-coding weaknesses.
  • Assess vulnerabilities and recommend risk-mitigation solutions, using automation to improve testing and remediation efficiency.
  • Communicate security findings, risks, and recommendations to technical teams, business stakeholders, and leadership.
  • Document delivery and implementation progress against service-level agreements and business metrics.
  • Lead AI security initiatives, including threat modeling LLM stacks for autonomy and prompt-injection risks and auditing third-party models and APIs.
  • Partner with business units, architects, and development teams to embed security into product design from the outset.
  • Define, manage, and improve automated, repeatable security review processes.
  • Monitor the security community for emerging public vulnerabilities and testing techniques.
  • Assess security risks for B2B initiatives, vendors, outsourced solutions, and third-party relationships.
  • Train developers and junior application security engineers on secure development practices and common weaknesses.

Requirements

  • 4+ years of related experience.
  • Bachelor’s degree in Computer Science, Information Technology, Software Engineering, or a related technical field, or equivalent work experience.
  • Software development and scripting experience with languages such as Java, Python, C++, Ruby, JavaScript, PowerShell, or PHP.
  • Hands-on application security testing experience with SAST, DAST, and SCA tools.
  • Experience with threat modeling, vulnerability assessment, penetration testing, API security, and OWASP Top Ten mitigation.
  • Experience securing applications in AWS and private cloud environments.
  • Relevant application security certifications, such as C|ASE, CSSLP, GWAPT, OSCP, or equivalent.
  • Experience with security and compliance frameworks including ISO 27001, NIST, GDPR, CIS, or SOC 2.
  • Strong technical and analytical skills.
  • High integrity and sound judgment when handling security access and risks.

Benefits

  • Base salary of $111,000–$144,400 annually, based on location, experience, and qualifications.
  • Company profit-sharing bonus program, communication stipends, and referral bonuses.
  • Medical, dental, and company-paid vision insurance.
  • 401(k) retirement plan with employer match and company contributions to health savings funds for eligible high-deductible health plan participants.
  • Paid time off and paid holidays.
  • Company-paid short-term disability coverage, with voluntary life, AD&D, accident, critical illness, and legal insurance options.
  • Employee assistance and wellness programs, including virtual primary care through Galileo and virtual mental health resources through Rula.
  • Career and skill development resources, plus recognition through an anniversary milestone program.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

HITCONTRACT

Senior DevSecOps and Vulnerability Management Engineer

HITCONTRACT 11-50 Professional Services

Join an international IT company as a Senior DevSecOps and Vulnerability Management Engineer to strengthen CI/CD, cloud, and vulnerability security for a US public-sector SaaS platform across a diverse multi-product estate.

Lithuania Poland Contract Lead Application Security Engineer
$89k-$98k
Argo CD AWS Azure C# CI/CD Datadog DevSecOps GitHub Actions Groovy Helm Java Jenkins Kubernetes Node.js PHP Power BI Ruby TypeScript
1 hour, 34 minutes ago
OneStream Software

Application Security Engineer

OneStream Software 1001-5000 Internet Software & Services

OneStream is hiring a remote Application Security Engineer to strengthen the security of its modern Finance platform by embedding practical application security throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$114k-$148k
Burp Suite C# CI/CD DevSecOps .NET PowerShell Python
2 days, 22 hours ago
Lever

Web Developer Security Engineer

Lever 201-500 Professional Services

Spry Methods seeks a Web Developer Security Engineer to embed application security across mission-critical federal and DoD web applications, APIs, and sensitive data throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$135k-$155k
CSS Cybersecurity DevSecOps HTML JavaScript .NET REST API SQL
1 week ago
Bitly

Staff Application Security Engineer (R5949)

Bitly 201-500 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to lead the evolution of its developer-centered secure SDLC and software supply-chain security program for defense technology products.

Anywhere Full-time Lead Application Security Engineer
$143k-$214k
Burp Suite CI/CD DevSecOps Kubernetes Microservices SonarQube
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers