RemoteLeaf Logo
Log in Sign up

Application Security Engineer

1 day, 5 hours ago
United States
Full-time
Mid Level
Application Security Engineer
Cybersecurity
Burp Suite C# CI/CD DevSecOps .NET PowerShell Python
Apply Now
OneStream Software

OneStream Software

OneStream Software offers a modern corporate performance management platform that simplifies financial operations and provides unified solutions for planning, reporting, and analytics.

Internet Software & Services
1001-5000
$700M raised
View All Jobs 9

Description

  • Triage and validate SAST, SCA, and DAST findings based on exploitability and real-world risk.
  • Partner with Development and Engineering teams to remediate vulnerabilities with practical guidance.
  • Participate in security architecture reviews and threat modelling for new features and services.
  • Integrate and tune application security tools within CI/CD pipelines.
  • Use AI-assisted tools, automation, scripts, and lightweight tooling to streamline security workflows.
  • Review the SDLC, software supply chain, and third-party dependencies to identify security improvements.
  • Perform targeted manual validation to confirm the impact of security findings.
  • Track remediation progress and document and report security concerns and trends.
  • Develop secure-development guidance, standards, and developer education.
  • Collaborate with the Security team to improve the organization's overall security posture.

Requirements

  • BSc/BA in Computer Science, Engineering, or a related field plus 5+ years of experience in application security, software development, or DevSecOps; or MSc/MA plus 1+ year; or associate degree plus 5+ years.
  • Experience triaging and prioritizing security findings by exploitability, business impact, and risk.
  • Working knowledge of application security tools, including SAST, SCA, and DAST.
  • Understanding of secure coding practices, common vulnerability classes, and secure design principles.
  • Experience contributing to security architecture reviews and threat modelling; familiarity with STRIDE is preferred.
  • Experience with CI/CD pipelines, DevSecOps practices, and software supply-chain security.
  • Experience using AI tools or LLMs and scripting/automation tools such as Python or PowerShell to automate repetitive work.
  • C# and .NET code writing or review experience is strongly preferred.
  • Experience with Burp Suite or similar web application validation tools is preferred.
  • Strong communication, collaboration, organization, judgement, and ability to explain technical details to technical and non-technical audiences; relevant certifications such as Security+, CSSLP, or GSSP-.NET are preferred.

Benefits

  • Base salary of $114,000–$148,000 USD, based on experience, skills, and location.
  • Additional variable compensation may apply.
  • Medical, dental, and vision insurance.
  • Life insurance and short- and long-term disability coverage.
  • Vacation time and paid holidays.
  • Professional development opportunities.
  • Retirement plan.
  • Remote work opportunity.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lever

Web Developer Security Engineer

Lever 201-500 Professional Services

Spry Methods seeks a Web Developer Security Engineer to embed application security across mission-critical federal and DoD web applications, APIs, and sensitive data throughout the software development lifecycle.

United States Full-time Mid Level Application Security Engineer
$135k-$155k
CSS Cybersecurity DevSecOps HTML JavaScript .NET REST API SQL
5 days, 7 hours ago
Bitly

Staff Application Security Engineer (R5949)

Bitly 201-500 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to lead the evolution of its developer-centered secure SDLC and software supply-chain security program for defense technology products.

Anywhere Full-time Lead Application Security Engineer
$143k-$214k
Burp Suite CI/CD DevSecOps Kubernetes Microservices SonarQube
1 week, 1 day ago
YipitData

Product Security Engineer

YipitData 501-1000 Professional Services

YipitData is seeking a Product Security Engineer to embed practical security across its data and analytics products, partnering with Engineering and Product to identify, prioritize, and remediate risks before production.

United States Full-time Senior Application Security Engineer
$180k-$180k
CI/CD JavaScript LLM Penetration Testing Python Serverless
1 week, 1 day ago
Bugcrowd

Manager, Security Operations

Bugcrowd 1001-5000 Internet Software & Services

Bugcrowd is seeking a Manager, Security Operations to lead Security Consultants and improve the triage, validation, and resolution of customer security submissions.

United States Full-time Lead Operations Manager
$129k-$162k
Network Security Python Tableau
7 hours, 57 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers