Application Security Engineer - Northeast region

📋 Description

• Implement, operationalize, and troubleshoot SAST platforms (e.g., Semgrep, Snyk, CodeQL, Checkmarx
• Design and integrate automated security testing into CI/CD pipelines (e.g., GitHub Actions, GitLab
• Author and adapt custom SAST rules (Semgrep, CodeQL) and triage, validate, and guide remediation of
• Advise client development teams on OWASP Top 10, threat modeling, and secure coding practices
• Leverage AI-assisted tooling to accelerate rule development, triage, and remediation guidance
• Contribute to reusable pipeline patterns, rule libraries, and delivery accelerators for the AppSec

🎯 Requirements

• Proficiency with the implementation, operationalization, and troubleshooting of Static Application
• Understanding of Continuous Integration / Continuous Delivery (CI/CD) pipeline tools and processes
• Experience in software engineering, ideally full stack software development, including modern
• Strong scripting and automation experience using one or more programming languages
• Solid working knowledge of application security fundamentals including the OWASP Top 10, threat
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive