RemoteLeaf Logo
Log in Sign up

Application Security Engineer

2 months, 1 week ago
United States
Full-time
Mid Level
Application Security Engineer
Cybersecurity
CSS Cybersecurity DevSecOps HTML JavaScript .NET REST API SQL WAF
Apply Now
Lever

Lever

Lever is a leading Talent Acquisition Suite that provides modern hiring and talent management solutions. Their applicant tracking system (ATS) with candidate relationship management capabilities empowers hiring teams to streamline recruiting efforts an...

Professional Services
251-1K
Founded 2012
$123M raised
View All Jobs 2

Description

  • Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs.
  • Drive the vulnerability lifecycle through threat modeling, security assessments, and validation of remediation actions.
  • Support secure design patterns, data protection mechanisms, and secure communication protocols across applications and supporting services.
  • Review and analyze web server and application logs to detect anomalies and indicators of compromise.
  • Implement automation scripts for threat intelligence integration and application security monitoring.
  • Participate in audits, risk assessments, and security authorization activities tied to federal frameworks.

Requirements

  • Minimum of 3 years of experience in web application security, application security engineering, or secure software development lifecycle work.
  • Hands-on experience in secure software development, DevSecOps automation, and vulnerability remediation.
  • Proven experience with .NET technologies, HTML5, CSS3, JavaScript, REST APIs, and SQL.
  • Ability to leverage AI-assisted development tools and scripting languages to automate monitoring and compliance efforts.
  • Strong understanding of the OWASP Top 10, secure coding standards, web application firewalls (WAFs), file integrity monitoring, and security testing tools.
  • Ability to perform risk assessments and provide remediation guidance for core systems and dependencies.
  • Bachelor's degree or higher in computer science, cybersecurity, information systems, engineering, or a related field.
  • Ability to meet federal screening and suitability requirements prior to start.
  • Current security certifications maintained for a minimum of 5 years, such as CSSLP, GWEB, CASE, OSWE, OSCP, Security+, or GSEC.

Benefits

  • Medical coverage through Cigna with 4 plan options.
  • Dental coverage through Cigna PPO Base and Buy-Up plans.
  • Vision coverage through Principal VSP Choice Network.
  • 11 paid federal holidays for full-time employees.
  • PTO accrual starting at 15 days per year.
  • Annual training allowance for job-related training or education.
  • 401(k) with multiple Fidelity fund choices and a company match.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Coforge

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Peru Mid Level Application Security Engineer
Azure Git GitHub
5 hours, 16 minutes ago
Trail of Bits

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

United States Full-time Junior Application Security Engineer
$140k-$180k
Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
5 hours, 46 minutes ago
Quanata

Staff Security Engineer [Remote-US]

Quanata 201-500 information technology & services

Quanata, LLC is seeking a Staff Security Engineer to secure AI-enabled systems, applications, cloud infrastructure, and platforms while shaping security standards and initiatives across the organization.

United States Full-time Lead Application Security Engineer
$290k-$400k
AWS CI/CD Cybersecurity DevSecOps Docker Generative AI GitHub Actions Go Java JavaScript Jenkins Kubernetes Machine Learning Python Secrets Management SIEM Terraform TypeScript
1 day, 5 hours ago
Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers