> Markdown version of [/jobs/ext/36919-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/36919-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Siri InfoSolutions Inc
- **Location:** Jersey City, NJ, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Architectural Patterns, Cloud Engineering, Cyber Security, Continuous Integration, Open Web Application Security, Power BI, Secure Coding, Software Vulnerability Management, Policy as Code, Grafana, Software Security, Information Technology, 3-tier Architectures, Serverless Computing, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** May 14, 2026
- **Apply:** https://www.careerjet.com/jobad/usfc723cc8fe2d6ba43a2ff74f0531e756

## About the Role

Bachelor's or Master's in Computer Science, Cybersecurity, or related field.
7+ years of experience in Application Security engineering, vulnerability management, or secure development.
Expertise in advanced AppSec concepts: secure design patterns, threat modeling, exploit analysis, and remediation strategy for modern architectures (microservices, APIs, cloud-native).
Proven experience leading CI/CD-integrated security automation (SAST, DAST, SCA, secrets scanning, IaC scanning).
Strong track record of working with engineering organizations and AppSec Champions to drive program adoption.
Demonstrated ability to interpret complex vulnerability trends, emerging threats, and zero-day risk scenarios.
Excellent communication, executive presentation skills, and ability to influence senior technical leaders.

## Description

The Senior Application Security Engineer serves as a technical and operational leader within the Vulnerability Operations function. This role drives large-scale adoption of application security controls, partnering closely with engineering teams and the Application Security Champion community to ensure secure design, development, and deployment across the enterprise. You will lead strategic control rollouts, guide vulnerability governance, address emerging threat classes, and provide expert escalation support for the most complex AppSec issues. Key Responsibilities: Strategic Leadership & Program Enablement
Lead the enterprise-wide operationalization of AppSec controls, ensuring scalable integration across CI/CD pipelines and diverse engineering environments.
Partner with the Application Security Champion team to embed secure development practices, coordinate training, share emerging vulnerability insights, and drive decentralized security ownership.
Own the tiered security control strategy (Tier 1 3), defining quarterly migration targets and ensuring cross-portfolio alignment. Advanced Vulnerability & Threat Management
Act as subject-matter expert for advanced and emerging vulnerability classes (e.g., supply chain risks, AI/ML application threats, container/Serverless misconfigurations, emerging OWASP categories).
Lead complex vulnerability triage and remediation efforts; facilitate cross-team deep-dive sessions to drive prioritization and timely mitigation.
Conduct proactive threat modeling and security design reviews for high-risk or business-critical applications. Automation & CI/CD Security Architecture
Architect scalable CI/CD integrations for SAST, DAST, SCA, and secrets scanning using policy-as-code, automated gating, and risk-based controls.
Implement and optimize Tier 3 merge-prevention and build-failure gates, ensuring engineering teams meet strict compliance requirements.
Develop reusable automation frameworks, scanning templates, and pipeline modules to accelerate secure software delivery.
Governance, Reporting & Stakeholder Engagement
Design and maintain KPIs, scorecards, and compliance dashboards using analytics platforms (Power BI, Grafana, or equivalent).
Lead risk review forums, document mitigations, publish weekly risk register updates, and deliver executive-level insights on trends, gaps, and emerging threats.
Oversee quarterly migration planning, dependency tracking, and cross-team alignment on AppSec program objectives.
Mentor AppSec Specialists and upskill partner engineering teams on tools, governance workflows, and emerging security techniques. Emerging Vulnerabilities & Continuous Improvement
Stay current with modern vulnerability trends (e.g., supply chain risks, API threats, cloud-native issues).
Evaluate tool outputs, identify false positives, and provide actionable remediation guidance.
Recommend improvements to scanning processes, workflows, and onboarding procedures. Required Qualifications & Skills


## Related Videos

- [5 steps for running a Kubernetes environment at scale](https://www.wearedevelopers.com/videos/88-5-steps-for-running-a-kubernetes-environment-at-scale)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Security Basics for Vibe Coders](https://www.wearedevelopers.com/magazine/598-security-basics-for-vibe-coders)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)