> Markdown version of [/jobs/ext/3962336-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3962336-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Open Systems Inc.
- **Location:** New York, NY, United States
- **Salary:** $150,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Cyber Security, Computer Engineering, Information Management, Python (Programming Language), Open Web Application Security, Systems Development Life Cycle, Software Engineering, Software Vulnerability Management, Software Security, Information Technology, Dynamic Application Security Testing
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/application-security-engineer-new-york-ny--ca2a1691-220b-45e9-b5fe-3a6205108707

## About the Role

Applications Security, Software Engineering, Applications Security, Software Engineering, Application Programming Interface (API), Computer Security, Establish Priorities, Threat Modeling, Software Development Lifecycle (SDLC), Risk Management, * Proven experience in application security with a focus on application security testing and vulnerability management

 * Hands-on experience with Application Security tools
 * Strong understanding of common application vulnerabilities (e.g., OWASP Top 10) and mitigation techniques
 * Experience with threat modelling methodologies and tools
 * Proficiency in at least one programming language (e.g., Java, Python, JavaScript)
 * Excellent communication and collaboration skills, with the ability to work effectively in cross functional teams
 * Strong understanding of risk management
 * Degree in a technology discipline (Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent)
 * Relevant security certifications (e.g. CISSP, CEH, CSSLP) or equivalent is preferred

## Description

* Perform Application Security scans (e.g. DAST and SCA) on applications and APIs to identify security vulnerabilities and weaknesses
 * Triage security findings and collaborate with development teams to prioritize and remediate identified vulnerabilities
 * Drive threat modelling as a standard part of the SDLC, and develop and maintain threat models for critical applications, identifying potential security risks and proposing mitigations
 * Drive the Security Champions program, and define and promote secure coding practices, patterns, and standards across development teams
 * Conduct security reviews and provide guidance on security requirements for new features and projects
 * Assist in the analysis, selection and rollout of new application security tools, processes, and standards