{"schemaVersion":"jobsearcher.job.v1","id":"3f66d4b366704a0ca7b52a71","url":"https://jobsearcher.com/jobs/3f66d4b366704a0ca7b52a71","canonicalUrl":"https://jobsearcher.com/jobs/3f66d4b366704a0ca7b52a71","title":"Application Security Engineer","description":"Key ResponsibilitiesConduct application security assessments, vulnerability assessments, and penetration testing of web applications, mobile applications, and APIs.Perform secure code reviews to identify security flaws and recommend remediation strategies.Identify and remediate vulnerabilities aligned with the OWASP Top 10 and OWASP API Security Top 10.Implement and manage security testing tools, including SAST, DAST, SCA, and secrets scanning.Integrate application security tools into CI/CD pipelines and DevSecOps workflows.Perform threat modeling and security architecture reviews for new and existing applications.Analyze vulnerability scan results, validate findings, eliminate false positives, and prioritize remediation based on risk.Collaborate with developers to resolve vulnerabilities such as SQL injection, cross-site scripting (XSS), broken access control, SSRF, and authentication flaws.Assess third-party libraries and open-source dependencies for known vulnerabilities.Establish and maintain secure coding standards and application security policies.Track vulnerabilities and remediation activities using security dashboards and ticketing systems.Support compliance initiatives and security standards such as ISO 27001, NIST, and PCI DSS, where applicable.Conduct security awareness sessions and provide secure coding guidance to development teams.Required Technical SkillsStrong understanding of web application security, API security, and common attack vectors.Knowledge of OWASP Top 10 and OWASP testing methodologies.Experience with SAST, DAST, SCA, and vulnerability management tools.Familiarity with tools such as Burp Suite, OWASP ZAP, SonarQube, Checkmarx, Veracode, Snyk, or similar platforms.Understanding of secure SDLC, DevSecOps, and CI/CD pipeline security.Knowledge of HTTP/HTTPS, REST APIs, authentication, authorization, OAuth 2.0, and OpenID Connect.Familiarity with programming or scripting languages such as Python, Java, JavaScript, or Go.Understanding of cryptography, encryption, secrets management, and security configuration.Ability to analyze vulnerabilities, assess business impact, and recommend practical remediation.Skills: remediation,owasp,application security,api,testing,authentication,vulnerability","company":"Staffing Spot","rawCompany":"staffing spot","city":"Silver Spring","state":"MD","isRemote":false,"isActive":false,"createdAt":"2026-10-30T07:49:05.292Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Application Security Engineer","description":"Key ResponsibilitiesConduct application security assessments, vulnerability assessments, and penetration testing of web applications, mobile applications, and APIs.Perform secure code reviews to identify security flaws and recommend remediation strategies.Identify and remediate vulnerabilities aligned with the OWASP Top 10 and OWASP API Security Top 10.Implement and manage security testing tools, including SAST, DAST, SCA, and secrets scanning.Integrate application security tools into CI/CD pipelines and DevSecOps workflows.Perform threat modeling and security architecture reviews for new and existing applications.Analyze vulnerability scan results, validate findings, eliminate false positives, and prioritize remediation based on risk.Collaborate with developers to resolve vulnerabilities such as SQL injection, cross-site scripting (XSS), broken access control, SSRF, and authentication flaws.Assess third-party libraries and open-source dependencies for known vulnerabilities.Establish and maintain secure coding standards and application security policies.Track vulnerabilities and remediation activities using security dashboards and ticketing systems.Support compliance initiatives and security standards such as ISO 27001, NIST, and PCI DSS, where applicable.Conduct security awareness sessions and provide secure coding guidance to development teams.Required Technical SkillsStrong understanding of web application security, API security, and common attack vectors.Knowledge of OWASP Top 10 and OWASP testing methodologies.Experience with SAST, DAST, SCA, and vulnerability management tools.Familiarity with tools such as Burp Suite, OWASP ZAP, SonarQube, Checkmarx, Veracode, Snyk, or similar platforms.Understanding of secure SDLC, DevSecOps, and CI/CD pipeline security.Knowledge of HTTP/HTTPS, REST APIs, authentication, authorization, OAuth 2.0, and OpenID Connect.Familiarity with programming or scripting languages such as Python, Java, JavaScript, or Go.Understanding of cryptography, encryption, secrets management, and security configuration.Ability to analyze vulnerabilities, assess business impact, and recommend practical remediation.Skills: remediation,owasp,application security,api,testing,authentication,vulnerability","datePosted":"2026-10-30T07:49:05.292Z","dateModified":"2026-10-30T07:49:05.292Z","hiringOrganization":{"@type":"Organization","name":"Staffing Spot","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Silver Spring","addressRegion":"MD","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"3f66d4b366704a0ca7b52a71"},"url":"https://jobsearcher.com/jobs/3f66d4b366704a0ca7b52a71"}}