> Markdown version of [/jobs/ext/1931988-application-engineer-cyber-security](https://www.wearedevelopers.com/jobs/ext/1931988-application-engineer-cyber-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Engineer, Cyber Security - **Company:** Inmar Inc. - **Location:** Winston-Salem, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Agile Methodology, Amazon Web Services, Applications Architecture, Software System Penetration Testing, Architectural Patterns, User Authentication, Automation of Tests, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Database Security, DevOps, Multi-Factor Authentication, Github, Identity and Access Management, Mobile Application Software, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Open Web Application Security, PCI Data Security Standards, Systems Development Life Cycle, Software Prototyping, Security Assertion Markup Language (SAML), Secure Coding, Session Management, Mobile Security, Software Engineering, TypeScript, Google Cloud, Software Security, Backend, Kubernetes, Information Technology, Metasploit, Software Version Control, Devsecops, Docker, Static Application Security Testing, Golang, Programming Languages, Microservices, Dynamic Application Security Testing - **Published:** August 5, 2026 - **Apply:** https://inmar.wd1.myworkdayjobs.com/inmarcareers/job/Headquarters-Winston-Salem-NC/Application-Engineer--Cyber-Security_JY2627530 ## About the Role * Bachelor of Science Degree in Computer Science, or a Bachelor of Arts Degree in a related technical field * 10+ years of related work experience in security engineering with prior experience as a Software Engineer, Backend Developer, or Full-Stack Developer. * Or any equivalent combination of experience and training/certification that provides the required knowledge, skills, and abilities needed to complete the major responsibilities/essential functions of the position * Certifications preferred. OSCP, CISSP, GCIH, GXPN, GPEN * Strong experience in web and mobile application security * Strong experience in distributed platform development security and design * In-depth knowledge of web and mobile security standards and best practices (OWASP, etc.) * Strong foundation in core information security principles and concepts (HTTPS, TLS, OAuth, etc.) * Experience with industry tools and technologies such as Burp, Metasploit, etc. * Demonstrated proficiency in building production-grade applications using modern programming languages (e.g., Java, Python, Go, TypeScript/JavaScript). * Solid understanding of public cloud security deployment and implementation issues (AWS, Azure, GCP) * Understanding of audits and standards requirements such ISO 27001, PCI DSS, SOC 1 & 2, etc. * Proven expertise in enterprise-grade and web scale security solutions Security and Risk Assessment * Aware of Security governance principles and able to apply them to the enterprise * Understands the legal and regulatory Issues relevant to the enterprise and does not place the enterprise at risk. Security Engineering * Solid working knowledge of secure design principles * Solid working knowledge of database security * Solid working knowledge of cloud computing * Solid working knowledge of cryptography * Solid working knowledge of secrets management practices and secure API architecture. Identity and Access Management * Authentication and authorization o OAuth, SAML, MFA, LDAP * Session management * Credential management Software Development Security * Solid working knowledge of software development lifecycles * Solid working knowledge of what software development methodologies are used in the enterprise and can explain what it means * Solid working knowledge of DevSecOps methodologies * Solid working knowledge of security vulnerabilities and understands how the following work: bounds checking, input/output validation, buffer overflow, privilege escalation * Solid working knowledge of secure coding practices * Solid working knowledge of modern version control and SDLC tooling (Github, Azure DevOps) ## Description The Sr. Application Engineer, Cyber Security is responsible for building, managing and supporting information security that underpins all internal and external user technology services, according to security policies and best practices. The Sr. Application Engineer, Cyber Security is a security-focused software engineer responsible for designing, building, and automating security controls directly into application architectures, CI/CD pipelines, and software development workflows. This individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery with minimal overhead. They work across internal and external teams of infrastructure specialists and software engineers making sure services are delivered and used securely as required, offering advice and guidance on security decisions and ensuring the effective use of common tools and patterns. The incumbent must have a collaborative, service-oriented mentality, a high sense of ownership, and a strong track record of driving security initiatives to completion They excel at communicating complex risk concepts to engineering teams, providing proactive status updates on architectural reviews and security remediation efforts, and managing production changes responsibly. Additional insights, experience or background in any of the following are also of great value: NIST, ISO 27001, Data Protection & Privacy, Threat Modeling (STRIDE), Static & Dynamic Security Analysis (SAST/DAST), Penetration Testing, Secure Software Architecture & Design, Developer Workflow Governance & Branch Protections, CI/CD Security Gates & Supply Chain Controls, API Security & Identity (OAuth2, OIDC), Microservices, Containers (Docker, Kubernetes), Cloud Security (AWS, Azure, GCP) & Architecture, Agile/DevOps Methodologies, Process Maturity, and related frameworks. Primary Accountabilities Technical (80%) * Be the primary security expert for multiple product lines and act as the point of contact for engineering and security. * Design, write, and maintain custom security tools, automation scripts, and custom scanner rules to streamline security checks in CI/CD pipelines. * Partner directly with software developers at the code level - providing actionable code snippets, refactoring recommendations, and technical architectural patterns to remediate complex vulnerabilities. * Support engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture. * Review development frameworks for security functionality, consistency, and uplift opportunities. * Perform threat modeling sessions and leverage them to prioritize time based on risk impact. * Implement and/or assess existing security controls. * Produce detailed technical designs and document all work using required standards, methods and tools, including prototyping tools where appropriate. * Design systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impact; works with well-understood technology and identifies appropriate patterns. Project Management (20%) * Work with application development teams to ensure secure software development lifecycle (S-SDLC) implementation and validation. * Educate and train product teams. * Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical cyber security subjects. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)