> Markdown version of [/jobs/ext/4388185-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4388185-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** Wilson Elser - Business & Legal Professionals - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $150,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), .NET Framework, PHP (Programming Language), Application Programming Interfaces (APIs), Agile Methodology, Microsoft Azure, Cloud Computing, Cyber Security, Continuous Integration, Information Systems Security Architecture Professional, Python (Programming Language), MongoDB, Open Source Technology, Open Web Application Security, Windows PowerShell, Systems Development Life Cycle, Azure DevOps Pipelines, Secure Coding, Software Engineering, SonarQube, Systems Integration, Software Vulnerability Management, Cloud Platform System, Azure Data Factory, ReactJS, Software Security, Data Lakes, Kubernetes, No-code Tools, Tenable Nessus, Low-code, Azure Service Fabric, Devsecops, Powerapps, Static Application Security Testing, Databricks, Dynamic Application Security Testing - **Published:** October 16, 2026 - **Apply:** https://www.thejobnetwork.com/job/99f5ef94-f0f5-4354-bc1c-ebc72488d940/senior-application-security-engineer ## About the Role * 5+ years of experience in Application Security, Product Security, DevSecOps, or Software Engineering * Hands-on experience securing CI/CD pipelines and modern development workflows * Experience working directly with development teams in agile environments * Strong understanding of: * Secure coding principles * OWASP Top 10 * Secure SDLC practices * Threat modeling * Vulnerability management Experience with at least several of the following technologies: * Azure DevOps * Azure cloud services * Snyk * SonarQube * Containers/Kubernetes * PowerShell * Python * .NET * JavaScript * React * PHP Experience integrating security tooling into CI/CD pipelines Ability to analyze scanner results and distinguish meaningful risk from low-value findings Strong scripting and automation skills Excellent communication and collaboration skills ## Description We are seeking a highly skilled Senior Application Security Engineer to help establish and mature our secure software development and DevSecOps program. This role will serve as the bridge between Information Security and Application Development, partnering closely with engineering leadership to embed security into the software development lifecycle without slowing innovation or delivery. This individual will work across internally developed applications, cloud-native platforms, CI/CD pipelines, integrations, low-code/no-code platforms, and Azure-hosted services. The ideal candidate combines hands-on application security expertise with practical development experience and strong collaboration skills. This position will report to the Information Security team with a strong dotted-line partnership into Application Development and Engineering leadership., Application Security & Secure Development Lifecycle (SDL) * Lead and mature the organization's secure software development lifecycle (SSDLC) program * Partner with developers and engineering leadership to embed secure-by-design principles into development workflows * Perform application security reviews, threat modeling, and secure architecture assessments * Review source code and assist development teams in identifying and remediating vulnerabilities * Establish secure development standards, policies, and reusable secure coding templates * Build and maintain "paved road" secure development patterns for common technologies and frameworks DevSecOps & CI/CD Security * Integrate and optimize security tooling within Azure DevOps pipelines * Manage and improve SAST, DAST, SCA, API scanning, and IaC scanning processes * Enhance automated security testing within CI/CD workflows * Develop processes for vulnerability ingestion, triage, prioritization, remediation tracking, and reporting * Build dashboards and metrics around application security posture and remediation SLAs * Create or customize scripts and integrations to normalize findings across multiple security tools Security Tooling & Vulnerability Management * Administer and optimize tools such as: * Snyk * SonarQube * Azure DevOps * PowerShell scanning tools * Additional open source or commercial AppSec tooling as needed Evaluate gaps in existing security tooling coverage and recommend improvements Tune scanners, suppress false positives appropriately, and create custom detection rules where necessary Partner with development teams to manage security exceptions and remediation timelines Cloud & Platform Security * Collaborate with cloud and infrastructure teams to secure Azure-hosted applications and services * Support security reviews involving: * Azure PaaS services * Containers * Databricks * MongoDB * Data Lake environments * Azure Data Factory * Power Platform / Power Apps Assist with securing low-code/no-code platforms and related governance processes Security Culture & Developer Enablement * Establish and support a Security Champions program within engineering teams * Deliver developer-focused training, workshops, lunch-and-learns, and secure coding guidance * Serve as a trusted advisor and mentor to developers on secure coding and DevSecOps practices * Promote a collaborative, enablement-focused security culture, Wilson Elser participates in the federal E-Verify program. With respect to all new hires, we provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's Form I-9 to confirm work authorization.Please review the official posters for detailed information regarding your rights and protections * Download the E-Verify Participation Poster (English & Spanish)