{"schemaVersion":"jobsearcher.job.v1","id":"ab7930c17c7c007dd2ba8a69","url":"https://jobsearcher.com/jobs/ab7930c17c7c007dd2ba8a69","canonicalUrl":"https://jobsearcher.com/jobs/ab7930c17c7c007dd2ba8a69","title":"Vulnerability Engineer - Application Security","description":"Job Description: Vulnerability Engineer – Application Security Focus Role Summary The Vulnerability Engineer is responsible for supporting the enterprise application security team through application vulnerability identification, risk prioritization, remediation coordination, reporting, and automation activities. This role works closely with application development, DevOps, cloud, architecture, and platform teams to reduce software security risk across the application lifecycle. The position serves as a technical contributor responsible for improving secure software development practices, integrating security into CI/CD pipelines, and enabling developers to remediate code-level vulnerabilities efficientlyPosition Responsibilities Application Security Analysis & Risk Prioritization Analyze and validate application security findings from SAST, DAST, SCA, container, secrets scanning, and related AppSec tools. Support risk-based prioritization of code-level vulnerabilities using exploitability, business criticality, application exposure, and remediation complexity. Validate findings, reduce false positives, and provide clear technical guidance to development teams. Perform trend analysis to identify recurring insecure coding patterns, vulnerable dependencies, and systemic SDLC improvement opportunities. Support application security exceptions, compensating controls, and risk acceptance processes. Secure Development & Remediation Coordination Coordinate remediation of application security findings across development, DevOps, product, cloud, and platform teams. Track remediation progress against established SLAs, release timelines, and escalation criteria. Provide secure coding guidance and technical recommendations to developers and application owners. Verify remediation completion through retesting, code review, pipeline results, and validation activities. Support creation of actionable remediation work items through ServiceNow, Azure DevOps Boards, GitHub Issues, Jira, or equivalent developer workflow tools. Secure SDLC, CI/CD & Governance Support secure software development lifecycle processes, including security requirements, threat modeling inputs, code review practices, and release security gates. Partner with Application Security, DevOps and engineering teams to integrate security testing and policy controls into CI/CD pipelines. Develop and maintain secure development standards, procedures, knowledge articles, and developer enablement materials. Ensure application security practices align with audit, compliance, regulatory, and internal governance requirements. Assist with application security exceptions, risk register entries, and governance reporting. Reporting & Metrics Develop and maintain application security reports and dashboards. Track metrics such as application vulnerability aging, remediation performance, SLA adherence, scan coverage, policy violations, and pipeline gate outcomes. Support executive, product, engineering, and operational reporting requirements. Validate reporting accuracy, application ownership, repository mapping, and data quality. Automation & Tooling Contribute to optimization of application security platforms and developer-facing security tooling. Support automation initiatives for vulnerability ingestion, prioritization, ticketing, remediation tracking, and CI/CD pipeline integration. Improve integration and data quality across application inventories, code repositories, CI/CD platforms, CMDB, and exposure management systems. Evaluate opportunities to streamline developer remediation workflows and reduce friction in secure software delivery. Technical Collaboration & Stakeholder Engagement Serve as a subject matter expert for application security, secure development, and code-level vulnerability remediation activities. Collaborate with Security Architecture, Application Security, Security Engineering, GRC, Application Development, DevOps, Cloud, Product, Data, and Platform teams. Communicate technical risks, remediation options, and secure coding recommendations to developers, application owners, and business stakeholders. Minimum Qualifications 3+ years in cybersecurity, application security, software development, DevSecOps, cloud security, or security operations. Experience working with application security tools and processes, including secure code analysis, dependency scanning, dynamic testing, or related application security capabilities. Experience with ASM/CAASM, SOAR, and Exposure Management platforms Working knowledge of CI/CD pipelines, source code repositories, branching strategies, build and release workflows, and modern code development processes. Strong understanding of application vulnerability identification, prioritization, remediation, validation, and secure coding practices. Strong analytical, troubleshooting, and communication skills. Experience working collaboratively across development, DevOps, security, and technical teams. Preferred Qualifications Experience with SAST, DAST, SCA, secrets scanning, container security, API security, and developer security platforms. Familiarity with common development languages, frameworks, package managers, CI/CD platforms, and repository management tools such as GitHub, GitLab, Azure DevOps, Jenkins, or equivalent platforms. Familiarity with OWASP Top 10, NIST, CIS, secure SDLC practices, and regulatory requirements. Experience supporting enterprise application security, DevSecOps, or vulnerability remediation programs.","company":"Insight Global","rawCompany":"insight global","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-08-19T13:27:06.154Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Vulnerability Engineer - Application Security","description":"Job Description: Vulnerability Engineer – Application Security Focus Role Summary The Vulnerability Engineer is responsible for supporting the enterprise application security team through application vulnerability identification, risk prioritization, remediation coordination, reporting, and automation activities. This role works closely with application development, DevOps, cloud, architecture, and platform teams to reduce software security risk across the application lifecycle. The position serves as a technical contributor responsible for improving secure software development practices, integrating security into CI/CD pipelines, and enabling developers to remediate code-level vulnerabilities efficientlyPosition Responsibilities Application Security Analysis & Risk Prioritization Analyze and validate application security findings from SAST, DAST, SCA, container, secrets scanning, and related AppSec tools. Support risk-based prioritization of code-level vulnerabilities using exploitability, business criticality, application exposure, and remediation complexity. Validate findings, reduce false positives, and provide clear technical guidance to development teams. Perform trend analysis to identify recurring insecure coding patterns, vulnerable dependencies, and systemic SDLC improvement opportunities. Support application security exceptions, compensating controls, and risk acceptance processes. Secure Development & Remediation Coordination Coordinate remediation of application security findings across development, DevOps, product, cloud, and platform teams. Track remediation progress against established SLAs, release timelines, and escalation criteria. Provide secure coding guidance and technical recommendations to developers and application owners. Verify remediation completion through retesting, code review, pipeline results, and validation activities. Support creation of actionable remediation work items through ServiceNow, Azure DevOps Boards, GitHub Issues, Jira, or equivalent developer workflow tools. Secure SDLC, CI/CD & Governance Support secure software development lifecycle processes, including security requirements, threat modeling inputs, code review practices, and release security gates. Partner with Application Security, DevOps and engineering teams to integrate security testing and policy controls into CI/CD pipelines. Develop and maintain secure development standards, procedures, knowledge articles, and developer enablement materials. Ensure application security practices align with audit, compliance, regulatory, and internal governance requirements. Assist with application security exceptions, risk register entries, and governance reporting. Reporting & Metrics Develop and maintain application security reports and dashboards. Track metrics such as application vulnerability aging, remediation performance, SLA adherence, scan coverage, policy violations, and pipeline gate outcomes. Support executive, product, engineering, and operational reporting requirements. Validate reporting accuracy, application ownership, repository mapping, and data quality. Automation & Tooling Contribute to optimization of application security platforms and developer-facing security tooling. Support automation initiatives for vulnerability ingestion, prioritization, ticketing, remediation tracking, and CI/CD pipeline integration. Improve integration and data quality across application inventories, code repositories, CI/CD platforms, CMDB, and exposure management systems. Evaluate opportunities to streamline developer remediation workflows and reduce friction in secure software delivery. Technical Collaboration & Stakeholder Engagement Serve as a subject matter expert for application security, secure development, and code-level vulnerability remediation activities. Collaborate with Security Architecture, Application Security, Security Engineering, GRC, Application Development, DevOps, Cloud, Product, Data, and Platform teams. Communicate technical risks, remediation options, and secure coding recommendations to developers, application owners, and business stakeholders. Minimum Qualifications 3+ years in cybersecurity, application security, software development, DevSecOps, cloud security, or security operations. Experience working with application security tools and processes, including secure code analysis, dependency scanning, dynamic testing, or related application security capabilities. Experience with ASM/CAASM, SOAR, and Exposure Management platforms Working knowledge of CI/CD pipelines, source code repositories, branching strategies, build and release workflows, and modern code development processes. Strong understanding of application vulnerability identification, prioritization, remediation, validation, and secure coding practices. Strong analytical, troubleshooting, and communication skills. Experience working collaboratively across development, DevOps, security, and technical teams. Preferred Qualifications Experience with SAST, DAST, SCA, secrets scanning, container security, API security, and developer security platforms. Familiarity with common development languages, frameworks, package managers, CI/CD platforms, and repository management tools such as GitHub, GitLab, Azure DevOps, Jenkins, or equivalent platforms. Familiarity with OWASP Top 10, NIST, CIS, secure SDLC practices, and regulatory requirements. Experience supporting enterprise application security, DevSecOps, or vulnerability remediation programs.","datePosted":"2026-08-19T13:27:06.154Z","dateModified":"2026-08-19T13:27:06.154Z","hiringOrganization":{"@type":"Organization","name":"Insight Global","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"ab7930c17c7c007dd2ba8a69"},"url":"https://jobsearcher.com/jobs/ab7930c17c7c007dd2ba8a69"}}