Senior Application Security Engineer in United States Embassy at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Application Security Engineer based in United States.

This role offers the opportunity to strengthen application security across a modern enterprise software platform used by organizations worldwide. You will work closely with engineering and security teams to embed secure development practices throughout the software development lifecycle while identifying and mitigating vulnerabilities before they reach production. The position combines hands-on technical expertise with strategic security guidance, allowing you to influence architecture, development standards, and security tooling. You'll collaborate with cross-functional stakeholders, contribute to innovative security initiatives, and help build resilient applications that protect customers and critical business operations. This is an excellent opportunity for an experienced security professional who enjoys solving complex technical challenges in a collaborative, remote-first environment.

The Senior Application Security Engineer will play a critical role in strengthening application security by integrating security into every phase of software development. This position focuses on vulnerability assessment, secure architecture, penetration testing, developer enablement, and continuous improvement of security processes and tools.

• Perform manual and automated application security assessments to identify and remediate vulnerabilities across enterprise applications.
• Conduct secure code reviews and analyze application source code to improve software security.
• Evaluate software development lifecycle (SDLC) processes and recommend improvements to strengthen application and software supply chain security.
• Partner with engineering teams to integrate secure coding practices and security controls throughout development workflows.
• Design, develop, and maintain internal security testing tools and automation capabilities.
• Perform penetration testing and validate security controls across applications and supporting infrastructure.
• Conduct threat modeling, security architecture reviews, and secure design assessments for new features and platforms.
• Define, document, and promote secure development standards, policies, and best practices.
• Collaborate with security teams to investigate attack patterns, identify indicators of compromise, and improve defensive capabilities.
• Document security findings, communicate remediation recommendations, and support risk prioritization across technical and business stakeholders.
• Mentor junior security team members and contribute to knowledge sharing and continuous improvement initiatives.

The ideal candidate combines deep application security expertise with strong software development knowledge and the ability to collaborate effectively across engineering and security teams. They are comfortable balancing technical depth with clear communication and strategic thinking.

• Bachelor's, Master's, or Associate degree in Computer Science, Engineering, or a related technical field, combined with relevant professional experience in application security, penetration testing, or software development.
• Strong hands-on experience performing application security assessments, vulnerability analysis, and secure code reviews.
• Experience conducting threat modeling and translating findings into practical remediation strategies.
• Solid understanding of secure software development lifecycle (SSDLC) principles and secure-by-design methodologies.
• Proficiency with C# and .NET development, including secure coding practices and code review techniques.
• Experience performing web application penetration testing and vulnerability validation.
• Knowledge of application architecture, software security testing tools, and common attack vectors.
• Familiarity with security compliance frameworks such as SOC 2, FedRAMP, or similar industry standards.
• Strong analytical, troubleshooting, and problem-solving skills with the ability to manage multiple priorities.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Offensive security certifications such as OSCP, GPEN, GXPN, or equivalent are considered an advantage.

• Fully remote position available within the United States.
• Competitive base salary ranging from $150,000 to $196,000, based on experience, skills, and location.
• Additional variable compensation opportunities where applicable.
• Comprehensive medical, dental, vision, and life insurance coverage.
• Short-term and long-term disability benefits.
• 401(k) retirement savings plan.
• Paid vacation and company holidays.
• Professional development and ongoing training opportunities.
• Collaborative culture focused on innovation, customer success, and continuous learning.
• Opportunity to work on impactful enterprise security initiatives within a growing technology organization.