aici cdsastcryptographydastowaspscaapplication securitycloud security
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$100к-150к/год
$110к$120кмедиана$140к
По похожим ролям (10) ~ $120к/год
76
Хорошая вакансия
развернуть
Обязанности в application security описаны четко и охватывают содержательные технические задачи, но формат консалтинга и противоречивые требования к стажу оставляют вопросы о конкретном проекте.
Кликните для подробной информации
Разнобой по стажуРабота в консалтингеЧеткий профильБезопасность ИИ
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Secure Software Engineer (Application Security): Embedding security throughout the software development lifecycle by designing secure systems, identifying vulnerabilities, and reducing risk across application portfolios with an accent on OWASP, code review, and integrated security tooling. Focus on strengthening authentication and authorization, automating security controls in CI/CD, and partnering with engineering teams to ship secure software.
Location: 100% remote within the United States
Salary: $100,000–$150,000 annually
Company
hirify.global is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
What you will do
Embed security throughout the software development lifecycle and partner with engineering teams to design secure systems.
Identify vulnerabilities, assess exploit patterns, and reduce risk across the application portfolio.
Perform code reviews across at least two major programming languages.
Implement and operate SAST, DAST, SCA, and CI/CD-integrated security tooling.
Strengthen authentication, authorization, cryptographic controls, cloud security, and infrastructure protections.
Communicate security risks and improvements to technical and non-technical audiences in an Agile environment.
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
At least five years of application security or security engineering experience; the position listing specifies 6+ years of experience.
Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
Hands-on code review experience across at least two major languages.
Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling.
Strong understanding of authentication, authorization, and cryptographic primitives.
Experience with cloud security and modern infrastructure controls.
Strong communication skills with technical and non-technical audiences.
Proficiency in at least one programming language for tooling and automation, plus experience working closely with engineering teams in an Agile environment.
Nice to have
Industry certifications such as OSCP, OSCE, GWAPT, or CISSP.
Experience with offensive security tooling and red-team operations.
Bug bounty experience, public CVEs, or open-source security contributions.
Familiarity with AI/LLM application security considerations.
Exposure to regulated industries with strict compliance requirements.
Culture & Benefits
Full-time direct W-2 employment.
Remote work within the United States.
Career growth opportunity within an established technology consulting and software development organization.
Applicants may include U.S. citizens, Green Card holders, EAD holders, and H-1B transfer candidates; new H-1B visa petitions cannot be sponsored.
Hiring process
Send a resume to Jenny@bvteck.com or contact the listed recruiting phone number for immediate consideration.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →