Salary-range : $150K-$160K
Must Haves:
- 5–7+ years of Cyber Security/IT experience, including 3+ years of recent hands-on Application Security engineering.
- Strong hands-on experience with SAST, DAST, SCA, Secure SDLC, and DevSecOps.
- Hands-on experience integrating and configuring security tooling within GitHub/GitHub Actions and developer workflows.
- Strong vulnerability triage and remediation experience, including validating findings, false positives, prioritizing risk, and driving issues through closure.
- Strong developer-facing AppSec experience, including troubleshooting vulnerabilities, explaining root cause, and recommending code-level fixes.
- Meaningful hands-on AI security experience related to AppSec, AI-assisted development, threat modeling, vulnerability management, or security automation
Plusses:
- Agentic-code security experience securing AI coding agents, agent-generated code, or agentic development workflows.
- Python scripting/automation personally writing Python to automate AppSec or security processes.
- AI-assisted code review, threat modeling, vulnerability triage, or remediation.
- Built automation around security findings, developer workflows, or vulnerability management.
- GitHub Advanced Security / GitHub-native security tooling experience. Cloud, API, Kubernetes/container, or IaC security experience.
This is a direct hire opportunity. The selected candidate will be employed directly by our client. All compensation and benefits, including but not limited to medical insurance, retirement plans, paid time off, and other perks, will be provided by the client in accordance with their internal policies and subject to applicable laws and eligibility requirements.
