Static Application Security Testing

Static Application Security Testing Engineer Jobs

3 jobs found

Today

Application Security Engineer

Cigars International Bethlehem, PA

Bethlehem, PA

Today

$125k+/yr Full time Application Security Cybersecurity Tools DevSecOps

Apply Now

Job Description

The Application Security Engineer is an onsite role in Bethlehem, PA focused on embedding security by design across the enterprise SDLC, with a salary of USD 125,000 per year.

Responsibilities

Evaluate and continuously refine SDLC processes, tooling, and release workflows from a security perspective.
Conduct gap analyses against secure-development frameworks, including NIST SSDF and OWASP ASVS.
Define, maintain, and evolve secure development standards and procedures aligned with PCI DSS and privacy regulations such as CCPA and GDPR.
Collaborate with engineering teams to propose and implement practical security improvements across the SDLC.
Embed security controls across all SDLC phases, including planning, design, coding, testing, deployment, and maintenance.
Deliver threat modeling, secure-design guidance, and architecture reviews of applications.
Establish and support secure design and code-review practices, coaching developers on security best practices.
Balance security requirements with developer experience and business needs to minimize friction while increasing security maturity.
Deploy, operate, and optimize application security tooling such as SAST, DAST, and SCA solutions.
Integrate security tooling, including Snyk and Checkmarx, into CI/CD pipelines to enable automated vulnerability detection.
Define and enforce security gates at key points within development and release workflows.
Ensure vulnerability findings are actionable, prioritized, and integrated into remediation processes.
Support static, dynamic, and penetration testing activities in collaboration with internal and external resources.
Integrate vulnerability management, continuous monitoring, and remediation tracking into the SDLC.
Provide application-security support during security incidents and assist teams with investigation and remediation.
Support secure platform and environment modernization efforts, including container security, OS hardening, and secrets management (e.g., Vault, Azure Key Vault).
Contribute to application and platform architecture improvements focused on security, stability, and resilience.

Requirements

3+ years of experience in Application Security or Software Engineering with a focus on secure development practices.
Hands-on experience implementing secure SDLC frameworks such as NIST SSDF and OWASP ASVS.
Practical experience integrating SAST/DAST tools into CI/CD pipelines and workflows.
Working knowledge of PCI DSS and privacy regulations (CCPA/GDPR) as they impact software development.
Strong communication skills with the ability to influence and collaborate with engineering teams.

Technologies

SAST
DAST
SCA
Snyk
Checkmarx
Vault
Azure Key Vault
NIST SSDF
OWASP ASVS
PCI DSS
CCPA/GDPR
OWASP Top 10

Benefits

401(k) matching
Dental insurance
Health insurance
Paid time off
Tuition reimbursement
Vision insurance

Preferred Qualifications

Experience with container security, image hardening, and secrets management technologies.
Familiarity with the OWASP Top 10, API security, and modern application security practices.
Experience coordinating or supporting penetration testing or DAST programs.
Relevant certifications such as CSSLP, CISSP, GWAPT, GCSA, or similar.

View full job page →

2d ago

Application Security Engineer, AI & Automation

Skill Remote 🌍 Remote

Remote

2d ago

$90 - $92/hr Contract Ai Governance Ai Security Application Security

Apply Now

Job Description

Benefits and why you’ll thrive in this role

Skill offers a remote, contract opportunity for a senior Application Security Engineer focused on AI powered automation. This role provides the flexibility of a remote arrangement, a competitive hourly range of USD 90 to 92, and the chance to shape security tooling that leverages frontier large language models for vulnerability identification, code reasoning, triage acceleration, and automated remediation. You will collaborate with distributed teams to impact how security is integrated into developer workflows, with emphasis on unified triage, software supply chain defense, and governance for new AI capabilities across the enterprise.

Responsibilities

AI and Automation Engineering: Test, implement, and optimize application security tooling that uses frontier LLMs to identify vulnerabilities, reason about code, speed triage, and drive automated remediation.
Modern Triage and Incident Response: Deliver unified triage coverage for SCA, SAST, and DAST findings. Lead rapid assessment and routing of threat intelligence escalations and critical patch events (PatchNow).
Software Supply Chain Defense: Strengthen open-source dependency selection, package intake, and SBOM visibility. Build guardrails to detect malicious packages and enforce security policies across developer pipelines.
Secure Developer Workflows: Assess and secure developer environments, including IDEs, plugins/extensions, package managers, and AI coding assistants against malicious code and unsafe configurations.
AI Governance Support: Assist with technical proofs of value, data handling reviews, and model output evaluations required to safely onboard new AI capabilities across the enterprise.

Requirements

Experience: 3+ years of hands-on Application Security, with deep familiarity across the vulnerability lifecycle (SCA, SAST, DAST, and manual verification).
Automation Mindset: Strong engineering fundamentals with scripting languages (Python, Go), APIs, CI/CD pipelines (GitHub Actions, GitLab CI), and developer tool integrations.
AI Curiosity: Practical familiarity or hands-on experimentation with frontier models, AI coding assistants (e.g., Copilot), prompt engineering, or AI orchestration frameworks.
Supply Chain Knowledge: Experience securing software supply chains, package managers, and third-party dependencies against modern attack vectors.
Communication: Ability to translate complex vulnerabilities into clear, actionable remediation guidance for software engineering teams.

Technologies

Python
Go
GitHub Actions
GitLab CI
Copilot

Bonus Points

Contributions to open-source security tools or AI/LLM security projects (for example, OWASP Top 10 for LLMs).
Experience building custom integrations or LLM agents to automate security analyst workflows.

View full job page →

4d ago

Senior Application Security Engineer

Calance US Houston, TX

Houston, TX

4d ago

$80 - $100/hr Full time Senior Ai Security Application Security

Apply Now

Job Description

Calance US is hiring a Senior Application Security Engineer for a hybrid role in Houston, TX. The position centers on embedding security into the software development lifecycle using SAST and DAST, augmented by AI-enabled tooling. The role collaborates with development, DevOps, and security teams to promote secure coding practices and strengthen the application risk posture. Compensation is USD 80 - 100 per hour, and the role requires a minimum of seven years of relevant experience.

Role Overview

The Senior Application Security Engineer will help secure the software development lifecycle by combining traditional SAST/DAST approaches with AI-enabled tools to identify and remediate code vulnerabilities. This role works closely with development, DevOps, and security teams to drive secure coding practices and scale risk improvements across the organization. AI-driven capabilities will be leveraged to enhance vulnerability detection accuracy, automate code reviews, and accelerate remediation throughout the SDLC.

Responsibilities

Integrate application security into the SDLC, CI/CD pipelines, and developer workflows
Lead and perform SAST, DAST, SCA, and API security testing
Utilize AI-based code scanning to improve vulnerability detection, reduce false positives, and speed remediation
Collaborate with developers to remediate vulnerabilities and strengthen secure coding practices
Conduct threat modeling and security reviews for applications and APIs
Track, analyze, and report security metrics such as vulnerability trends and remediation timelines
Deploy and manage AI-powered code scanning across source code, APIs, and dependencies
Apply AI/ML to identify complex vulnerability patterns, insecure coding practices, and hidden attack paths
Leverage AI to reduce false positives and improve signal-to-noise, enabling efficient triage
Provide root-cause analysis and actionable remediation guidance through AI-assisted insights
Integrate AI-enabled security scanning into CI/CD pipelines to deliver real-time feedback on development and commits
Evaluate and optimize AI models and rulesets to improve detection accuracy and align with enterprise risk priorities
Partner with engineering teams to embed AI-assisted code review and secure coding recommendations into pull requests and IDE plugins
Monitor and measure the effectiveness of AI-based scanning using metrics such as detection rates and remediation speed
Stay current with emerging AI security tools, LLM-based code analysis, and automated remediation technologies, promoting adoption where value is demonstrated

Requirements

7+ years of experience in application security, DevSecOps, or secure software engineering
Strong knowledge of OWASP Top 10 and secure coding practices
Experience with application security tools such as SAST, DAST, and SCA
Experience integrating security into CI/CD pipelines
Knowledge of Ghazdo and GitHub Advance security
Proficiency in at least one programming language (Python, Java, JavaScript)

Technologies

Python
Java
JavaScript
SAST
DAST
SCA
GitHub Advanced Security
Ghazdo

View full job page →

Static Application Security Testing Engineer Jobs

Application Security Engineer

Application Security Engineer, AI & Automation

Senior Application Security Engineer

Get Static Application Security Testing Engineer Jobs alerts