Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, and prioritizing remediation of high-risk vulnerabilities. The role partners with engineering teams, develops security automation, establishes application security metrics, and communicates risks to technical and nontechnical stakeholders. Responsibilities also include supporting AWS cloud application security, secure coding, infrastructure-as-code security, and maintaining documentation.
AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards.
WHY JOIN US
If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!
ABOUT THE ROLE
We are looking for a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. This person deploys and tunes SAST, DAST, and IAST tools, conducts threat modeling, and integrates security controls into CI/CD pipelines. Comfort working across Python, JavaScript, or Java and cloud infrastructure such as AWS is essential.
MUST HAVES
- You must be authorized to work for ANY employer in the US (e.g., Green card holders, TN visa holders, GC EAD, H4 EAD, U4U with EAD), as we are unable to sponsor or take over employment visa sponsorship at this time;
- Strong hands-on Application Security experience in a modern software-development environment of at least 4 years.
- Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages.
- Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus.
- Demonstrated experience conducting threat modeling and translating findings into practical security requirements.
- Experience integrating security testing and controls into CI/CD pipelines and developer workflows.
- Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities.
- Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt.
- Ability to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities.
- Strong communication and influence skills: able to explain complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders.
- Collaborative, solutions-oriented approach; must be able to build trust with development teams and improve security without unnecessarily slowing product delivery.
- Upper-intermediate English level.
NICE TO HAVES
- Familiarity with security tools such as Nessus, Burp, and web application firewalls.
- Experience with Static/Dynamic Application Security Testing methodologies and tools.
- Experience with automation tools such as Terraform, Puppet, Chef, Salt, Ansible, or CloudFormation.
- Experience conducting a detailed threat model exercise.
- Experience with CI/CD pipelines and how to assess them from a security perspective, including the integration of security tools with the pipeline.
- Experience working with cloud-based infrastructure and technologies, preferably AWS.
- A collaborator who will partner across the engineering organization to drive the establishment of a security posture.
- Results oriented and believes in steady continuous improvement.
- Curious and always goes beyond what is happening to discover why.
- An effective communicator with a solution-oriented mindset.
- A strategic thinker who focuses on integrating current initiatives and ideating on ways to improve while still meeting the needs of the business.
WHAT YOU WILL DO
- Be a part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products.
- Deploy and tune code scanning solutions such as SAST, DAST, and IAST.
- Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities.
- Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.
- Collaborate with technology stakeholders to establish metrics that demonstrate application security proficiency across all engineering teams.
- Steer the development of tools to improve the security of applications through automation and other means, allowing for faster and easier security gains by teams.
- Ensure processes associated with key systems are documented, maintained, and archived.
PERKS AND BENEFITS
- Professional growth: Mentorship, TechTalks, and personalized growth roadmaps.
- Competitive compensation: USD-based pay with education, fitness, and team activity budgets.
- Exciting projects: Modern solutions with Fortune 500 and top product companies.
- Flextime: Flexible schedule with remote and office options.
Similar Jobs
eCommerce • Information Technology • Software
The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.
Top Skills:
Aws CloudCloudflareDockerDynamoDBGitlabKubernetesLaravelMySQLNode.jsPHPServerless FrameworkSysdigVantaVue
eCommerce • Fashion • Retail • Sales • Wearables • Design
Lead sales floor performance and mentor peers while delivering exceptional brand storytelling and customer service. Drive personal and store sales, champion omnichannel and social/virtual selling, support live-stream and social content, perform opening/closing procedures, and contribute to an inclusive team culture. Assist with events, capture client feedback, and maintain product knowledge across categories.
Top Skills:
Live-Stream ShoppingOmnichannelSocial MediaSocial SellingVirtual Selling
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Leads external audit support focused on ASC 740 income tax accounting and financial statement audit activities. Manages engagements, budgets, timelines, deliverables, work quality, and stakeholder communication. Reviews tax workpapers and financial reporting documentation, resolves complex issues, applies GAAP and GAAS, and coaches onshore and offshore teams. Uses technology and AI to improve audit quality and efficiency while maintaining professional standards, independence, and compliance.
Top Skills:
AIAsc 740GaapGaas
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
