Senior Application Security Engineer ID70122
AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards.
WHY JOIN US
If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!
ABOUT THE ROLE
We are looking for a Senior Application Security Engineer to develop AI-enabled secure code scanning and integrate security tooling directly into SDLC and agentic developer workflows within a large-scale financial services environment. You will deploy and tune SAST, DAST, and SCA tools to eliminate noise and deliver high-confidence alerts, provide code-level remediation guidance to Java and Python engineering teams, and leverage LLMs and AI agents to automate vulnerability triage and secure coding pattern adoption.
WHAT YOU WILL DO
- Develop AI-enabled secure code scanning and deliver “Golden Images” to drive secure-from-the-start adoption;
- Continuously tune security scanning tools (SAST, DAST, SCA) to eliminate noise and deliver high-confidence alerts;
- Enable automated development of secure coding patterns and integrate them with traditional and agentic SDLC workflows;
- Work directly with software engineers in Java/Python to provide code-level remediation guidance.
MUST HAVES
- 5+ years of experience;
- Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA); fully autonomous execution and capability to mentor Middle 1 engineers;
- Advanced application threat modeling and architecture review experience;
- Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging;
- Upper-intermediate English level.
NICE TO HAVES
- Advanced knowledge of Cloud-Native Application Protection Platforms (CNAPP) like Wiz;
- Deep understanding of advanced vulnerability scoring models, including EPSS alongside traditional CVSS;
- Experience with complex data governance and compliance frameworks in highly regulated environments.
PERKS AND BENEFITS
- Professional growth: Mentorship, TechTalks, and personalized growth roadmaps.
- Competitive compensation: USD-based pay with education, fitness, and team activity budgets.
- Exciting projects: Modern solutions with Fortune 500 and top product companies.
- Flextime: Flexible schedule with remote and office options.
WHY JOIN US
If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you!
ABOUT THE ROLE
We are looking for a Senior Application Security Engineer to develop AI-enabled secure code scanning and integrate security tooling directly into SDLC and agentic developer workflows within a large-scale financial services environment. You will deploy and tune SAST, DAST, and SCA tools to eliminate noise and deliver high-confidence alerts, provide code-level remediation guidance to Java and Python engineering teams, and leverage LLMs and AI agents to automate vulnerability triage and secure coding pattern adoption.
WHAT YOU WILL DO
- Develop AI-enabled secure code scanning and deliver “Golden Images” to drive secure-from-the-start adoption;
- Continuously tune security scanning tools (SAST, DAST, SCA) to eliminate noise and deliver high-confidence alerts;
- Enable automated development of secure coding patterns and integrate them with traditional and agentic SDLC workflows;
- Work directly with software engineers in Java/Python to provide code-level remediation guidance.
MUST HAVES
- 5+ years of experience;
- Deep, hands-on expertise deploying and tuning modern application security testing tools (SAST, DAST, SCA); fully autonomous execution and capability to mentor Middle 1 engineers;
- Advanced application threat modeling and architecture review experience;
- Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging;
- Upper-intermediate English level.
NICE TO HAVES
- Advanced knowledge of Cloud-Native Application Protection Platforms (CNAPP) like Wiz;
- Deep understanding of advanced vulnerability scoring models, including EPSS alongside traditional CVSS;
- Experience with complex data governance and compliance frameworks in highly regulated environments.
PERKS AND BENEFITS
- Professional growth: Mentorship, TechTalks, and personalized growth roadmaps.
- Competitive compensation: USD-based pay with education, fitness, and team activity budgets.
- Exciting projects: Modern solutions with Fortune 500 and top product companies.
- Flextime: Flexible schedule with remote and office options.