> Markdown version of [/jobs/ext/3557574-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3557574-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Insight Global
- **Location:** Philadelphia, PA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Engineering, Continuous Integration, OAuth, OpenID, Open Web Application Security, Fortify (Software), Security Assertion Markup Language (SAML), Secure Coding, Software Engineering, Software Security, Veracode, GWAPT, Kubernetes, Cyber Warfare, Docker, Vulnerability Analysis
- **Published:** October 2, 2026
- **Apply:** https://dejobs.org/x/x/3284D5AF88D74DE19C1AF1AD5F3316A5/job/

## About the Role

4+ years of experience in Application Security, Software Engineering, Cloud Engineering, or a related field. Strong understanding of application security principles, secure development practices, and modern attack vectors. Experience with threat modeling methodologies such as STRIDE, PASTA, or similar. Knowledge of OWASP Top 10, OWASP ASVS, and common web/API security vulnerabilities. Experience integrating security controls and testing into CI/CD environments. Understanding of OAuth 2.0, OIDC, SAML, and modern authentication patterns. Familiarity with containerized and cloud-native environments (Docker, Kubernetes, etc.). Preferred Qualifications Experience building or maturing an Application Security program. Experience with tools such as Fortify, Veracode, or Wiz. Azure and/or AWS cloud security experience. Exposure to API security testing, WAFs, and runtime application protection. Security certifications such as CISSP, OSCP, OSWE, GPEN, or GWAPT.

## Description

Insight Global is seeking an Application Security Engineer to join a growing Cyber Defense & Engineering team. This individual will play a key role in building and maturing an enterprise-wide Application Security program as the organization continues its cloud modernization efforts.

This is a highly visible, hands-on position focused on establishing security standards, implementing scalable AppSec practices, and partnering directly with development teams to improve application security across the organization. The ideal candidate enjoys building processes from the ground up and can effectively bridge the gap between security and engineering teams.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)