> Markdown version of [/jobs/ext/150556-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/150556-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** Firstpro Philadelphia, LLC - **Location:** Philadelphia, PA, United States - **Experience:** Experienced - **Salary:** $120,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Burp Suite, Cloud Computing Security, Cloud Engineering, Code Review, Cyber Security, Information Systems, DevOps, Mobile Application Software, Information Systems Security Architecture Professional, Open Web Application Security, Systems Development Life Cycle, Fortify (Software), Secure Coding, Software Engineering, Software Vulnerability Management, Cloud Platform System, Software Security, Veracode, GWAPT, Containerization, Information Technology, Checkmarx, Devsecops, Api Management, Static Application Security Testing, Vulnerability Analysis, Microservices, Dynamic Application Security Testing - **Published:** May 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=fbac06bb7e0a4e41 ## About the Role Do you have experience in Vulnerability management?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field * 5+ years of experience in Information Security, with at least 3 years focused on Application Security, Secure Development, or DevSecOps * Proven experience contributing to or leading an Application Security program * Strong understanding of OWASP Top 10, OWASP ASVS, SANS Top 25, and secure SDLC principles * Hands-on experience with AppSec tools such as Burp Suite, Fortify, Checkmarx, Veracode, and OWASP ZAP * Experience with threat modeling, penetration testing, secure architecture design, and vulnerability management * Experience securing cloud environments (AWS or Azure) and implementing cloud-native security controls * Familiarity with Kubernetes security, container hardening, and runtime security practices * Strong communication skills with the ability to influence both technical and non-technical stakeholders * Active passport and willingness to travel internationally Preferred * Certifications such as CISSP, CSSLP, OSCP, GWAPT, CEH, or GIAC Cloud Security certifications * Experience securing embedded systems and/or mobile applications ## Description FirstPRO is seeking a Application Security Engineer who will play a key role in strengthening the security posture of our applications, platforms, and software development lifecycle. This role partners closely with software engineering, DevOps, and cybersecurity teams to embed security best practices throughout design, development, deployment, and operations., * Act as a key security liaison between Cybersecurity and Software Development teams, ensuring security is integrated across the SDLC * Perform application security assessments, including code reviews, API testing, threat modeling, vulnerability assessments, and penetration testing * Define, document, and enforce secure coding standards and best practices * Integrate and manage application security tools within CI/CD pipelines (SAST, DAST, SCA, IaC scanning, and container security tools) * Support secure architecture and design reviews for cloud-native, microservices, and containerized applications * Conduct and contribute to threat modeling and security risk assessments * Ensure application security practices align with regulatory and industry frameworks (e.g., NIST CSF, ISO 27001, IEC 62443) * Develop and deliver security awareness and secure coding training for development teams * Monitor, triage, and respond to application security vulnerabilities and incidents * Stay current on emerging threats, vulnerabilities, and industry trends, incorporating threat intelligence into security practices * Manage relationships with third-party security vendors and consultants * Perform additional duties as assigned ## Related Videos - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/videos/1568-why-security-first-development-helps-you-ship-better-software-faster) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)