Application Security Engineer

Posted 6hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Application Security Engineer operating Newfold Digital’s AppSec scanning program for its global web technology products. Triaging vulnerabilities and partnering with engineering teams on remediation.

Responsibilities:

  • Operate and maintain AppSec scanning tools, including SAST, SCA, secrets scanning, and container scanning, across the SDLC
  • Triage findings, validate true positives, and prioritize remediation with engineering teams
  • Track vulnerabilities through closure and monitor SLA compliance
  • Support onboarding of new repositories and services into security tooling
  • Contribute to internal documentation, runbooks, and process improvements
  • Assist with basic scripting and automation tasks under guidance from senior team members

Requirements:

  • 2–4 years in application security, security engineering, or a related software/QA engineering role
  • Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices
  • Basic scripting ability; Python preferred
  • Comfortable communicating findings clearly to developers
  • Strong attention to detail and ability to manage a queue of findings across multiple tools
  • Exposure to Defect Dojo, Dependency-Track, Truffle Hog, Trivy, and/or Semgrep is nice to have
  • Familiarity with CI/CD pipelines and how security scans plug into them is nice to have
  • Interest in growing into tool integration, automation, or custom rule-writing over time is nice to have

Benefits:

  • Work-life balance
  • Diversity and inclusion programs
  • Learning and development opportunities
  • 20+ affinity groups for networking and connection
  • Competitive HMO benefits – 175k MBL with one free dependent upon one year of service
  • Punctuality Bonus
  • Generous Vacation policy
  • Mentorship and career growth opportunities