> Markdown version of [/jobs/ext/1447985-cybersecurity-engineer-iv-application-security](https://www.wearedevelopers.com/jobs/ext/1447985-cybersecurity-engineer-iv-application-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer IV Application Security - **Company:** The Aes Group, Inc - **Location:** Chicago, IL, United States - **Experience:** Expert - **Salary:** $187,200.0 - $193,440.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Applications Architecture, Code Review, Encodings, Cyber Security, Computer Programming, Continuous Integration, Corona (Software Development Kit), Github, Software Maintenance, Systems Development Life Cycle, Secure Coding, Software Engineering, Systems Integration, Software Vulnerability Management, Web Applications, Software Security, Information Technology, Software Version Control, Devsecops, Static Application Security Testing, Dynamic Application Security Testing - **Published:** July 26, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b1f1a0e95b87e9c3 ## About the Role * Software Development Lifecycle (SDLC) * Secure Software Development * SAST & DAST * Security Governance * DevSecOps / CI-CD Security * Vulnerability Management * Secure Coding Practices * Software Development Background * Strong Communication & Stakeholder Management, * Bachelor's degree in Computer Science or a related technical field with 8+ years of Information Security experience OR * Master's degree with 6+ years of Information Security experience Senior candidates with significant Application Security experience are encouraged to apply., * Strong hands-on experience in Application Security. * Experience integrating security into modern Software Development Lifecycles. * Knowledge of secure software development practices. * Experience with application security governance. Software Development Lifecycle (Highest Priority) Candidates must demonstrate strong understanding of the complete SDLC, including: * Requirements gathering * Application architecture * Software development * Testing * Deployment * Production support * Application maintenance Previous software development experience is highly desirable, as this role partners directly with development teams throughout the development lifecycle. Security Testing Experience with application security testing methodologies such as: * Static Application Security Testing (SAST) * Dynamic Application Security Testing (DAST) Experience with any commercial security testing platform is acceptable. Software Development Preferred experience with: * Reading and understanding application source code * Working alongside software developers * Secure coding practices * Security integration within CI/CD pipelines Source Control Experience with GitHub or similar source control platforms. Preferred Qualifications * Software development experience * Ability to review and analyze application source code * AI programming or AI model experience * Experience utilizing AI tools within software development * Familiarity with secure DevSecOps practices Candidates with AI experience will receive additional consideration when technical qualifications are otherwise comparable. Required Soft Skills * Excellent written and verbal communication skills * Ability to explain complex cybersecurity concepts to technical and non-technical audiences * Strong collaboration and stakeholder management skills * Experience working with software engineers, architects, and technical leadership * Strong presentation and interpersonal skills * Ability to influence security decisions across multiple teams, Successful candidates will have experience: * Embedding security throughout the Software Development Lifecycle * Working directly with software engineering teams * Supporting secure application development * Integrating security into CI/CD pipelines * Performing application security assessments * Helping developers understand and remediate vulnerabilities * Securing customer-facing web and eCommerce applications, Required * Strong Application Security experience * Deep understanding of the Software Development Lifecycle (SDLC) * Secure software development expertise * Experience with SAST and DAST * Security governance experience * Ability to work directly with software developers * Excellent communication and stakeholder management skills Preferred * Software development background * Source code review and analysis experience * GitHub experience * AI programming or AI model experience * DevSecOps experience ## Description Seeking an experienced Cybersecurity Engineer IV specializing in Application Security to join its Security Engineering team. This is not a general cybersecurity role the primary focus is embedding security throughout the Software Development Lifecycle (SDLC) while partnering directly with software engineering teams. The selected candidate will support external-facing, revenue-generating eCommerce and web applications, ensuring security is integrated from application design through deployment and production. This position is ideal for security professionals who have experience working alongside developers to build secure applications rather than performing security assessments after development is complete. About the Team The Security Engineering team partners closely with clients eCommerce Development organization to integrate security into every phase of application development. Engineers work directly with software developers, architects, and technical leaders to improve secure coding practices, identify vulnerabilities early, and implement scalable security solutions throughout the SDLC., * Partner with software engineering teams to integrate security throughout the Software Development Lifecycle (SDLC). * Embed Security by Design principles into application architecture and development. * Review and improve application security practices across enterprise web applications. * Identify, analyze, prioritize, and help remediate application security vulnerabilities. * Utilize and support security testing throughout the SDLC, including Static and Dynamic Application Security Testing (SAST/DAST). * Analyze application code when necessary to identify security risks and recommend remediation. * Collaborate with developers to implement secure coding practices. * Communicate security risks, findings, and recommendations to software engineers, technical leadership, and business stakeholders. * Provide guidance on secure software development, application security governance, and security best practices. * Support security integration within CI/CD pipelines and modern development workflows. * Educate development teams on application security principles and secure development methodologies. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)