AppSec Engineer

Location: 100% remote within the United States

Salary: $80,000–$100,000 annually

Company

hirify.global is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

What you will do

• Embed application security throughout the software development lifecycle.
• Partner with engineering teams to design secure systems and ship security improvements.
• Identify vulnerabilities, assess exploit patterns, and reduce risk across the application portfolio.
• Perform hands-on code reviews across multiple programming languages.
• Implement and maintain SAST, DAST, SCA, and CI/CD-integrated security tooling.
• Apply cloud security, authentication, authorization, and cryptographic controls.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• At least five years of application security or security engineering experience; the position lists six or more years of experience.
• Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
• Experience with cloud security, modern infrastructure controls, Agile engineering environments, and security automation.
• Strong communication skills with technical and non-technical audiences.
• Must be a U.S. Citizen, Green Card Holder, EAD Holder, or H-1B transfer candidate; new H-1B visa petitions cannot be sponsored.

Nice to have

• OSCP, OSCE, GWAPT, CISSP, or similar industry certification.
• Offensive security tooling and red-team operations experience.
• Bug bounty experience, public CVEs, or open-source security contributions.
• Familiarity with AI and LLM application security.
• Experience with regulated industries and strict compliance requirements.

Culture & Benefits

• Full-time direct W-2 employment.
• Remote work within the United States.
• Career growth opportunities within an established technology consulting and software development organization.
• Collaboration with engineering teams to improve security efficiently without slowing software delivery.