Application Security Engineer
Posted 13hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Application Security Engineer embedding security testing and vulnerability remediation into CivicPlus software development. Protecting digital products used by local governments and residents.
Responsibilities:
- Perform security code reviews, threat modeling, and architecture reviews across development projects as part of a secure SDLC
- Collaborate with development teams to integrate secure design, secure coding standards, and security controls across the SDLC
- Identify, track, and validate vulnerabilities and security defects from security testing and scanning
- Partner with development teams to prioritize remediation within compliance timeline requirements
- Coordinate external, independent penetration testing of production environments
- Lead application security testing, including SAST, DAST, and IAST
- Serve as a subject matter expert on application security vulnerabilities, including the OWASP Top 10, and emerging threats
Requirements:
- 3–7 years of experience in application security, secure development, penetration testing, or a related field
- Hands-on experience with application/security testing tooling (SAST, DAST, and/or IAST)
- Experience integrating secure design principles into change management, code review, CI/CD pipelines, and secure development operations
- Security+, GSEC, GSSP, or equivalent certification
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related field (preferred)
- Familiarity with secure coding practices across multiple languages, such as C#, Go, Java, JavaScript, or Python
- Knowledge of cloud-native and SaaS application environments
- AI-forward mindset with demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality
- Demonstrated ability to effectively use AI tools to enhance productivity and outcomes
- Applicants must be authorized to work in the US
- CivicPlus is currently unable to provide visa sponsorship for this position now or in the future
Benefits:
- Comprehensive health insurance
- Dental insurance
- Vision insurance
- Flexible Time Off
- 401(k) plan

















