The Application Security Engineer is responsible for advancing the organization’s secure software development program by integrating security throughout the software development lifecycle (SDLC). This role partners closely with application development, DevOps, infrastructure, and security teams to identify, assess, and remediate application security risks while enabling secure delivery of business applications.
The position leads application security initiatives including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Application Security Posture Management (ASPM), CI/CD security integrations, container security scanning, vulnerability management, and security automation. The engineer will support security assessments, threat modeling, secure code review processes, and security tooling integrations across multiple business units. Responsibilities also include managing AppSec intake processes, developing operational runbooks, driving remediation activities, and supporting strategic security transformation initiatives. These responsibilities align with the work currently owned by the departing Application Security resource, including ArmorCode ASPM implementation, SAST/SCA integrations, AppSec automation, GitLab container scanning initiatives, and management of high-priority application security activities.