> Markdown version of [/jobs/ext/3713515-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3713515-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Arkhya Tech
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Java (Programming Language), .NET Framework, Amazon Web Services, Microsoft Azure, Cloud Computing, Python (Programming Language), Open Web Application Security, PCI Data Security Standards, Systems Development Life Cycle, Software Engineering, Software Vulnerability Management, Google Cloud, Software Security, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 13, 2026
- **Apply:** https://www.juju.com/job/2_163739598

## About the Role

*12+ years of experience in application security, application development, or related cybersecurity roles.

*Deep expertise in application security (SAST, DAST, SCA), vulnerability management, and secure SDLC.

*Strong knowledge of security risk frameworks (NIST, ISO 27001, OWASP, PCI-DSS, SOX).

*Hands-on experience with application development (Java, Python, .NET, or similar) enabling effective security partnership with dev teams.

*Demonstrated experience in vulnerability triage, risk scoring (CVSS), and remediation tracking. xrbllit

*Familiarity with cloud platforms (AWS, Azure, GCP) and container/Kubernetes security.

## Description

*Champion application security best practices across development teams and Lines of Business (LOBs), driving a security-first culture.

*Lead application security reviews, threat modeling, and code assessments to identify and mitigate vulnerabilities throughout the SDLC.

*Partner with development, infrastructure, and risk teams to define and enforce security standards and policies.

*Manage and track application security vulnerabilities, ensuring timely remediation in alignment with risk appetite.

*Conduct security risk assessments and coordinate with Risk and Compliance teams to ensure regulatory adherence.

*Provide subject matter expertise on application security tools (SAST, DAST, SCA) and integrate them into CI/CD pipelines.