Application Security Engineer
Our client is a growing leader in the application security space, focused on protecting web applications, cloud environments, and critical third-party integrations. As their digital footprint continues to expand, they are investing heavily in strengthening their security posture and reducing risk across web platforms and infrastructure. We are seeking an experienced Application Security Engineer who is passionate about identifying vulnerabilities, implementing secure coding practices, and partnering with development teams to build security into every stage of the software lifecycle.
What You'll Do:
As an Application Security Engineer, you will play a key role in securing web applications, cloud infrastructure, APIs, and CI/CD pipelines. You will work closely with developers, DevOps teams, and security stakeholders to proactively identify and remediate security vulnerabilities.
Responsibilities:
Assess, prioritize, and remediate vulnerabilities across WordPress websites, custom applications, APIs, and third-party packages.
Perform security reviews of application code and provide recommendations for remediation and secure coding improvements.
Partner with engineering teams to validate and resolve findings from vulnerability scans, penetration tests, and code reviews.
Support and maintain PCI DSS compliance initiatives, including identifying and remediating PCI-related security risks.
Secure cloud environments within AWS and GCP by implementing security controls, hardening configurations, and mitigating threats.
Maintain and support security efforts related to Ruby-based APIs; exposure to Python-based APIs is a plus.
Strengthen the security of CI/CD pipelines, Infrastructure-as-Code (IaC), secrets management, and authentication mechanisms.
Evaluate WordPress themes, plugins, and integrations for security vulnerabilities and compliance risks.
Monitor emerging threats and recommend proactive security improvements.
Required Qualifications:
4+ years of experience in Application Security, Web Security, or a related cybersecurity discipline.
Hands-on experience securing WordPress environments, including plugin and theme security assessments.
Strong knowledge of secure coding practices and common web application vulnerabilities.
Experience reviewing and remediating findings from penetration testing, static code analysis, and vulnerability scanning tools.
Proficiency with JavaScript and a solid understanding of front-end application security.
Working knowledge of PHP, APIs, and modern web application architectures.
Experience securing cloud environments within AWS and/or Google Cloud Platform (GCP).Knowledge of PCI DSS requirements and experience supporting PCI compliance initiatives.
Familiarity with security tools such as Wordfence, WAFs, SAST/DAST platforms, and vulnerability management solutions.
Strong communication skills with the ability to collaborate effectively across security and engineering teams.
Preferred Qualifications:
- Experience with Ruby-based APIs.
- Experience supporting Python-based applications or APIs.
- Familiarity with DevSecOps practices and security automation.
- Experience securing CI/CD pipelines and Infrastructure-as-Code environments.
- Industry certifications such as:
- CISSPCSSLPGWEBGWAPTOSCPAWS Security Specialty
Why Join?
- Work on challenging application security initiatives that directly impact business security posture
- Collaborate with highly skilled developers and security professionals
- Influence secure development practices across multiple technology stacks
- Opportunity to work with cutting-edge cloud, web, and DevSecOps technologies
- Competitive compensation, benefits, and career growth opportunities
Apply TodayIf you have a passion for securing modern web applications, cloud platforms, and development ecosystems, we'd love to hear from you. Apply now to help build and maintain a secure, scalable, and resilient digital environment.
This position supports a U.S. federal government contract. Pursuant to the terms of that contract, this role requires U.S. citizenship.