{"schemaVersion":"jobsearcher.job.v1","id":"22515d50fc69da4d5f19ec53","url":"https://jobsearcher.com/jobs/22515d50fc69da4d5f19ec53","canonicalUrl":"https://jobsearcher.com/jobs/22515d50fc69da4d5f19ec53","title":"Application Security Engineer","description":"Our goal is to solve problems and deliver results for our clients. At Cloud and Things, you can be a part of transforming the public sector’s IT environment. Our team is on the forefront of helping to solve the government's most complex IT challenges. If you are seeking a role that offers the opportunity to work on rewarding projects, consider a career with Cloud and Things.  *This is an exempt position. Salary commensurate with experience*Overview:Location: Hybrid – Brooklyn, NYSalary: $125,000 - $140,000We are seeking an Application Security Engineer who will support our client with ensuring security is integrated into all stages of software development. This role will be responsible for designing and building secure applications while working closely with application administrators who manage security tools and CI/CD pipelines. The ideal candidate for this role will have strong application development experience with a demonstrated understanding of web and mobile application architecture and security protocols.Duties: Establish and apply secure coding practices within the development team.Define and enforce secure coding standards for Java, .NET, Python, and JavaScript applications.Conduct secure design and architecture reviews for new and legacy systems.Educate developers on secure coding practices, authentication/authorization best practices, and common application vulnerabilities.Apply protections aligned with:OWASP Top 10OWASP API Security Top 10Design and implement secure REST APIs and web services.Implement secure authentication/authorization using:SAML2OIDCOAuth2Secure Java and JavaScript applications, including:Spring BootReactEnsure secure handling of tokens, sessions, and secrets.Collaborate with App Admins and Security team to integrate applications into WAFs, load balancers, and other security monitoring toolsMandatory Qualifications:Associates Degree or combination of experience and education.4+ years of experience in secure application development.1+ year of experience with hands-on software development experience.4+ years demonstrating an understanding of:Web and mobile application architectureInternet protocols (HTTP, HTTPS, WebSockets)REST API securityExpertise in SAST, DAST, and SCA concepts (understanding results and remediation), in collaboration with App Admins.Familiarity with security tools such as Veracode, Burp Suite, Zimperium, Prisma, Rapid7.Experience applying NIST 800-53 and 800-171 controls at the application design level.Strong analytical, troubleshooting, and problem-solving skills.Ability to work independently within a development-focused team.Desirable Qualifications: Experience with containerized applications (Docker, Kubernetes).Knowledge of:Core Java, J2EE, Spring BootReact, AngularJS, HTML5, CSS, JavaScriptExperience designing secure GIS systems.Familiarity with public safety or emergency response systems.Cloud and Things complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. AI-Assisted Resume Evaluation NoticeCloud and Things – Talent ManagementNotice to CandidatesCloud and Things utilizes artificial intelligence (AI) tools to assist our recruiting team in evaluating candidate applications for streamlining; consistency, efficiency, and thoroughness.  All hiring decisions are ultimately made by our human recruiting professionals.How AI Is UsedOur AI tools assist by:Analyzing resumes against job requirementsSupporting our recruiters in candidate data evaluationEnsuring consistent review standards across all applicationsImportant: AI serves as a support tool only. As noted above, all candidate selection and hiring decisions are made by experienced human recruiters. Your unedited resume will be processed by our AI tools as part of this evaluation.Your Data and PrivacyCloud and Things Data Handling:Your information is processed securely and used exclusively for recruitment purposesCloud and Things may store your resume in our Applicant Tracking System (ATS) indefinitely for future job matching opportunitiesYou may opt out of long-term ATS storage by emailing your name  and your request to opt out of storing your resume in the ATS to: security@cloudandthings.comAll personal information is handled confidentially in accordance with our privacy policyAI Tool Data Processing:AI processing data is retained for a maximum of 90 days, after which it is deletedAll data sent to AI tools is encrypted in transit and at restAI tools comply with applicable privacy laws including GDPR and CCPAPersonal data is anonymized or minimized wherever possible during AI processingYour ParticipationBy submitting your application, you acknowledge this notice and consent to AI-assisted evaluation as part of our recruitment process. You may opt out only by choosing not to submit your resume for consideration.","company":"Cloud Things","rawCompany":"cloud things","city":"Brooklyn","state":"NY","isRemote":false,"isActive":false,"createdAt":"2026-04-16T09:47:09.313Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Application Security Engineer","description":"Our goal is to solve problems and deliver results for our clients. At Cloud and Things, you can be a part of transforming the public sector’s IT environment. Our team is on the forefront of helping to solve the government's most complex IT challenges. If you are seeking a role that offers the opportunity to work on rewarding projects, consider a career with Cloud and Things.  *This is an exempt position. Salary commensurate with experience*Overview:Location: Hybrid – Brooklyn, NYSalary: $125,000 - $140,000We are seeking an Application Security Engineer who will support our client with ensuring security is integrated into all stages of software development. This role will be responsible for designing and building secure applications while working closely with application administrators who manage security tools and CI/CD pipelines. The ideal candidate for this role will have strong application development experience with a demonstrated understanding of web and mobile application architecture and security protocols.Duties: Establish and apply secure coding practices within the development team.Define and enforce secure coding standards for Java, .NET, Python, and JavaScript applications.Conduct secure design and architecture reviews for new and legacy systems.Educate developers on secure coding practices, authentication/authorization best practices, and common application vulnerabilities.Apply protections aligned with:OWASP Top 10OWASP API Security Top 10Design and implement secure REST APIs and web services.Implement secure authentication/authorization using:SAML2OIDCOAuth2Secure Java and JavaScript applications, including:Spring BootReactEnsure secure handling of tokens, sessions, and secrets.Collaborate with App Admins and Security team to integrate applications into WAFs, load balancers, and other security monitoring toolsMandatory Qualifications:Associates Degree or combination of experience and education.4+ years of experience in secure application development.1+ year of experience with hands-on software development experience.4+ years demonstrating an understanding of:Web and mobile application architectureInternet protocols (HTTP, HTTPS, WebSockets)REST API securityExpertise in SAST, DAST, and SCA concepts (understanding results and remediation), in collaboration with App Admins.Familiarity with security tools such as Veracode, Burp Suite, Zimperium, Prisma, Rapid7.Experience applying NIST 800-53 and 800-171 controls at the application design level.Strong analytical, troubleshooting, and problem-solving skills.Ability to work independently within a development-focused team.Desirable Qualifications: Experience with containerized applications (Docker, Kubernetes).Knowledge of:Core Java, J2EE, Spring BootReact, AngularJS, HTML5, CSS, JavaScriptExperience designing secure GIS systems.Familiarity with public safety or emergency response systems.Cloud and Things complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. AI-Assisted Resume Evaluation NoticeCloud and Things – Talent ManagementNotice to CandidatesCloud and Things utilizes artificial intelligence (AI) tools to assist our recruiting team in evaluating candidate applications for streamlining; consistency, efficiency, and thoroughness.  All hiring decisions are ultimately made by our human recruiting professionals.How AI Is UsedOur AI tools assist by:Analyzing resumes against job requirementsSupporting our recruiters in candidate data evaluationEnsuring consistent review standards across all applicationsImportant: AI serves as a support tool only. As noted above, all candidate selection and hiring decisions are made by experienced human recruiters. Your unedited resume will be processed by our AI tools as part of this evaluation.Your Data and PrivacyCloud and Things Data Handling:Your information is processed securely and used exclusively for recruitment purposesCloud and Things may store your resume in our Applicant Tracking System (ATS) indefinitely for future job matching opportunitiesYou may opt out of long-term ATS storage by emailing your name  and your request to opt out of storing your resume in the ATS to: security@cloudandthings.comAll personal information is handled confidentially in accordance with our privacy policyAI Tool Data Processing:AI processing data is retained for a maximum of 90 days, after which it is deletedAll data sent to AI tools is encrypted in transit and at restAI tools comply with applicable privacy laws including GDPR and CCPAPersonal data is anonymized or minimized wherever possible during AI processingYour ParticipationBy submitting your application, you acknowledge this notice and consent to AI-assisted evaluation as part of our recruitment process. You may opt out only by choosing not to submit your resume for consideration.","datePosted":"2026-04-16T09:47:09.313Z","dateModified":"2026-04-16T09:47:09.313Z","hiringOrganization":{"@type":"Organization","name":"Cloud Things","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brooklyn","addressRegion":"NY","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"22515d50fc69da4d5f19ec53"},"url":"https://jobsearcher.com/jobs/22515d50fc69da4d5f19ec53"}}