Application Security Engineer

Insight Global is seeking an Application Security Engineer to join a growing Cyber Defense & Engineering team. This individual will play a key role in building and maturing an enterprise-wide Application Security program as the organization continues its cloud modernization efforts.

This is a highly visible, hands-on position focused on establishing security standards, implementing scalable AppSec practices, and partnering directly with development teams to improve application security across the organization. The ideal candidate enjoys building processes from the ground up and can effectively bridge the gap between security and engineering teams.

4+ years of experience in Application Security, Software Engineering, Cloud Engineering, or a related field. Strong understanding of application security principles, secure development practices, and modern attack vectors. Experience with threat modeling methodologies such as STRIDE, PASTA, or similar. Knowledge of OWASP Top 10, OWASP ASVS, and common web/API security vulnerabilities. Experience integrating security controls and testing into CI/CD environments. Understanding of OAuth 2.0, OIDC, SAML, and modern authentication patterns. Familiarity with containerized and cloud-native environments (Docker, Kubernetes, etc.). Preferred Qualifications Experience building or maturing an Application Security program. Experience with tools such as Fortify, Veracode, or Wiz. Azure and/or AWS cloud security experience. Exposure to API security testing, WAFs, and runtime application protection. Security certifications such as CISSP, OSCP, OSWE, GPEN, or GWAPT.