Назад
Company hidden
обновлено 8 дней назад

Application Security Engineer

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Application Security Engineer (Application Security/Cloud): Remediating vulnerabilities, legacy code, outdated dependencies, and infrastructure weaknesses across a global digital classroom platform with an accent on hands-on code fixes, secure SDLC integration, and developer collaboration. Focus on embedding SAST/DAST/SCA controls, hardening cloud infrastructure, automating incident response, and resolving complex security defects.

Location: Remote within Ohio, EST, or CST

Company

hirify.global provides a digital classroom platform used by schools, students, and teachers worldwide.

What you will do

  • Use automated scanners and internal risk processes to identify vulnerabilities, deprecated packages, outdated libraries, legacy code, and technical debt.
  • Implement code-level fixes, refactor legacy components, upgrade dependencies, and modernize applications without disrupting production features.
  • Collaborate with engineering pods to review security posture, troubleshoot technical issues, remove remediation blockers, and guide developers through secure fixes.
  • Create security playbooks, coding standards, remediation documentation, and a knowledge base for secure coding practices.
  • Integrate automated security testing and guardrails into the software development lifecycle, supporting a continuous shift-left security model.
  • Harden cloud infrastructure with firewalls, intrusion detection, encryption, secure partitioning, and automated incident response capabilities.

Requirements

  • 5–8+ years of experience in Application Security or Security Engineering, including the ability to read code, identify architectural flaws, and implement fixes or remediation scripts.
  • Proven experience managing technical debt and legacy code paths and safely updating third-party libraries and dependencies.
  • Strong written communication skills and experience creating security playbooks and remediation documentation.
  • Experience collaborating directly with developers, pairing to debug technical issues, and delivering code fixes.
  • Familiarity with cloud-native architectures, containerized applications, CI/CD integrations, and automated security testing systems including SAST, DAST, and SCA.
  • A proactive builder mindset and ability to implement lasting infrastructure or code-level security safeguards.

Nice to have

  • Exposure to application security fundamentals, specifically OWASP.
  • Experience with network configuration and application deployment.

Culture & Benefits

  • People-first environment focused on improving education and supporting teachers, students, and schools.
  • Diverse team including startup, Fortune 500, and big technology professionals.
  • Learning and development support including subsidized courses, certifications, conferences, and access to Udemy.
  • Opportunity to contribute to a digital education platform used by millions of users worldwide.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →