7 дней назад
Application Security Engineer (DevSecOps)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Engineer (DevSecOps): Embedding application security controls, automation, and secure development practices into the software delivery lifecycle for cloud-based applications with an accent on SAST, DAST, threat modeling, and CI/CD security tooling. Focus on integrating security across AWS and Azure environments, triaging vulnerabilities, and improving developer security practices without slowing delivery.
Location: Boca Raton, Florida, United States; hybrid work with on-site attendance Monday through Thursday and optional remote work on Fridays
Company
Purpose Brands is the parent company of , Orangetheory, Waxing the City, and The Bar Method.
What you will do
- Embed application security practices across the software development lifecycle, from design through deployment and maintenance.
- Perform SAST, DAST, software composition analysis, code reviews, threat modeling, and application security assessments.
- Integrate and maintain security tooling in CI/CD pipelines, including GitHub Advanced Security, Syft, Clair, Qualys, and dependency-scanning tools.
- Support application security for workloads running on AWS, Azure, IaaS, PaaS, and container platforms.
- Triage vulnerabilities, prioritize remediation, support investigations, and validate the effectiveness of application security controls.
- Partner with engineering, DevOps, cloud, and platform teams to provide secure coding guidance and improve security processes, standards, and metrics.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field.
- 3–5 years of experience in application security, security engineering, or software engineering with a strong security focus.
- Hands-on experience with application security testing, code reviews, modern programming languages, frameworks, and APIs.
- Experience with SAST, DAST, dependency scanning, CI/CD pipelines, DevOps workflows, and DevSecOps concepts.
- Strong knowledge of OWASP Top 10, secure coding, authentication and authorization, API security, and AWS and/or Azure environments.
- Ability to communicate security risks and remediation guidance clearly to technical and non-technical stakeholders.
Nice to have
- Security+, CSSLP, GWAPT, GWEB, CEH, GPEN, or another application security-focused certification.
Culture & Benefits
- Hybrid work environment with remote work available on Fridays.
- Medical, dental, vision, life, and disability insurance.
- Unlimited time off, paid holidays, and flexible Fridays between Memorial Day and Labor Day.
- 401(k) savings plan with 4% matching.
- Mental health benefits, including 10 coaching and therapy sessions.
- Professional development opportunities, brand discounts, reimbursements, in-house workout facilities, and team-building activities.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
13 дней назад
Info Protection Advisor – Application Security Engineer (AppSec)
155 958 - 171 900$
12 дней назад
Senior Application Security Engineer (Application Security)
172 000 - 200 000$
9 дней назад
Lead Security Architect (Cybersecurity)
142 300 - 195 700$
8 дней назад
DevSecOps and AI/Automation Engineer
149 100 - 215 925$
12 дней назад
Lead AppSec Engineer (Application Security)
116 000 - 170 000$
WRITER
13 дней назад
Staff Security Engineer Application Security (AI)
183 000 - 240 000$