Назад
Company hidden
7 дней назад

Application Security Engineer (DevSecOps)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Application Security Engineer (DevSecOps): Embedding application security controls, automation, and secure development practices into the software delivery lifecycle for cloud-based applications with an accent on SAST, DAST, threat modeling, and CI/CD security tooling. Focus on integrating security across AWS and Azure environments, triaging vulnerabilities, and improving developer security practices without slowing delivery.

Location: Boca Raton, Florida, United States; hybrid work with on-site attendance Monday through Thursday and optional remote work on Fridays

Company

Purpose Brands is the parent company of hirify.global, Orangetheory, Waxing the City, and The Bar Method.

What you will do

  • Embed application security practices across the software development lifecycle, from design through deployment and maintenance.
  • Perform SAST, DAST, software composition analysis, code reviews, threat modeling, and application security assessments.
  • Integrate and maintain security tooling in CI/CD pipelines, including GitHub Advanced Security, Syft, Clair, Qualys, and dependency-scanning tools.
  • Support application security for workloads running on AWS, Azure, IaaS, PaaS, and container platforms.
  • Triage vulnerabilities, prioritize remediation, support investigations, and validate the effectiveness of application security controls.
  • Partner with engineering, DevOps, cloud, and platform teams to provide secure coding guidance and improve security processes, standards, and metrics.

Requirements

  • Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field.
  • 3–5 years of experience in application security, security engineering, or software engineering with a strong security focus.
  • Hands-on experience with application security testing, code reviews, modern programming languages, frameworks, and APIs.
  • Experience with SAST, DAST, dependency scanning, CI/CD pipelines, DevOps workflows, and DevSecOps concepts.
  • Strong knowledge of OWASP Top 10, secure coding, authentication and authorization, API security, and AWS and/or Azure environments.
  • Ability to communicate security risks and remediation guidance clearly to technical and non-technical stakeholders.

Nice to have

  • Security+, CSSLP, GWAPT, GWEB, CEH, GPEN, or another application security-focused certification.

Culture & Benefits

  • Hybrid work environment with remote work available on Fridays.
  • Medical, dental, vision, life, and disability insurance.
  • Unlimited time off, paid holidays, and flexible Fridays between Memorial Day and Labor Day.
  • 401(k) savings plan with 4% matching.
  • Mental health benefits, including 10 coaching and therapy sessions.
  • Professional development opportunities, brand discounts, reimbursements, in-house workout facilities, and team-building activities.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →