> Markdown version of [/jobs/ext/538737-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/538737-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** IBA InfoTech Inc. - **Location:** Greensboro, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Agile Methodology, Burp Suite, Code Review, DevOps, Dynamic Program Analysis, Mobile Application Software, Network Architecture, Systems Development Life Cycle, Fortify (Software), Web Application Security, Software Engineering, Webinspect, Software Security, Veracode, Firewalls (Computer Science), GWAPT, Information Technology, Checkmarx, Appscan, Burpsuite - **Published:** June 14, 2026 - **Apply:** https://ibainfotech.com/senior-application-security-engineer ## About the Role * Undergraduate degree or 4+ years of comparable work experience * OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET Preferred, * 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position * Extensive experience in web application security * Strong knowledge of application security throughout the SDLC * Experience with agile delivery practices * Experience integrating security into DevOps practices. * Experience conducting source code review preferred * Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc. * Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc. * Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS * Familiarity with common DMZ architectures * Prior financial services experience preferred * Agile Mindset; awareness/understanding of Agile methodologies ## Description * Responsibility for the security of LFG applications and services * Conduct design review, code review, and dynamic analysis * Identify, communicate, and drive the resolution of vulnerabilities * Serve as a subject matter expert for application development and infrastructure teams * Communicate effectively with a wide variety of technical levels * Perform security assessments of web and mobile applications * Research and advocate for new security solutions and technologies * Stay current on security trends, vulnerabilities, and testing methods * Contribute to related policies, standards, and supporting documentation ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics) - [Why Security-First Development Helps You Ship Better Software Faster](https://www.wearedevelopers.com/videos/1568-why-security-first-development-helps-you-ship-better-software-faster) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)