AppSec Specialist, Application Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
AppSec Specialist securing applications through vulnerability assessment and proactive measures. Collaborating with engineering teams to enhance product security at Clicksign.
Responsibilities:
- Assess technical vulnerabilities and propose solutions to improve the security of our platform, working in our stack (Ruby, Go, and PHP) and developing security fixes on AWS/Lambda.
- Quickly assess development queue demands, reducing the AppSec bottleneck and unblocking Engineering deliveries.
- Actively propose and implement fixes in code, going beyond merely reporting findings.
- Conduct threat modeling and apply secure-by-design principles to product initiatives.
- Create guardrails, tooling, and automations that make the secure path the default for Engineering teams.
- Integrate and tune security tools in the CI/CD pipeline (SAST, SCA, and secret scanning), keeping noise and false positives low.
Requirements:
- Experience in software engineering or security, writing and delivering production code (ideally Ruby and PHP), including automations on AWS/Lambda.
- Experience in Application Security/Product Security: threat modeling, secure-by-design, and creating guardrails and tooling.
- Strong knowledge of CI/CD pipeline security, with calibrated SAST, SCA, and secret scanning.
- Knowledge of AWS cloud security as applied to the product.
- Information security certifications are a plus.
- Strong ability to collaborate with Engineering teams, proposing and implementing fixes directly in code — not just reporting findings.
- Ability to communicate in English (written and spoken).
Benefits:
- 100% remote work.
- Trust-based culture, results-oriented, with plenty of challenge and learning opportunities.
- Autonomy and ownership in a collaborative and empathetic environment.
- Feedback culture and regular 1:1s with human leadership and no micromanagement.
- Comprehensive benefits including meal/food allowance, childcare assistance, home office stipend, health coverage, education and cultural benefits, Gympass, birthday day-off, discounts on therapy and English courses, among other partnerships.
Similar Jobs
Workday Security Developer
Workday Security Developer optimizing security model across Workday ERP Suite. Partnering with HR, Finance, and Compliance teams for secure access and system enhancements.
Product Manager, Developer Security
Product Manager for Venn developing products for developers as buyers not just end users. Leading strategy, market discovery, and metrics for the developer security market.
Senior Staff Product Manager – Platform Security
Senior Staff Product Manager leading Platform Security at Splunk, focusing on security primitives and cryptography. Driving product strategy and execution for a multi-billion-dollar portfolio.
Information Security Lead
Information Security Lead overseeing a comprehensive security program at Alloy Therapeutics. Responsible for both technical and governance aspects, ensuring data protection and compliance.
Senior Security Engineer
Senior Security Engineer with 7-10 years experience enhancing security and resilience of enterprise identity infrastructure for leading financial services organization.
Federal Security and Compliance Consultant
Federal Security & Compliance Consultant providing consulting and compliance support for Matrix Design Group's federal projects. Collaborating on security requirements and documentation while supporting client engagements.
Cybersecurity Engineer
Cyber-Security Engineer developing and implementing security concepts for IT, Cloud, and hybrid infrastructures. Contributing to security standards and regulatory compliance in a remote or hybrid capacity.
Director, Network Facility Security
Director of Network Facility Security responsible for leading U.S. physical security strategy at DSV. Ensuring compliance and operational excellence across the distribution network.
RMF Cybersecurity ISSO/SME 3
Cybersecurity Risk Management Framework Information System Security Officer managing RMF lifecycle activities for medical systems. Leading efforts to achieve and maintain Authorizations to Operate while ensuring compliance with cybersecurity requirements.
Associate Security Engineer, Identity Security
Associate Security Engineer providing hands-on support for identity security services in a global cybersecurity organization. Collaborating with teams on identity management and security technologies.
Senior Security Risk Management Consultant
Senior Security Risk Management Consultant driving enterprise-wide security risk management strategies. Partnering with stakeholders and senior leadership to assess and mitigate cybersecurity risks at Trinity Health.
Cybersecurity Project Manager
Cybersecurity Project Manager overseeing AI agent training and evaluation for customers in a dynamic cybersecurity firm. Collaborating with teams to enhance customer cybersecurity posture through innovative solutions.
Ethical Hacker – OT Security
OT Security Consultant at Packetlabs managing security assessments of Operational Technology environments. Collaborating with clients to improve security posture without operational disruptions.
Security Control Assessor – ISSE Support
Security Control Assessor supporting cybersecurity assessments and compliance activities for federal healthcare systems. Collaborating with teams to meet Federal security requirements and support modernization.
Identity & Devices Security Architect – Client Consulting
Security Architect at Cyclotron designing enterprise deployments of Microsoft 365 Identity and Device Management tools. Collaborating with clients to enhance protection of Microsoft-based assets.
Especialista Técnico, SAP Security & GRC Access Control
Technical Specialist in SAP Security & GRC Access Control involved in migrating systems and managing authorizations. Collaborating with teams to ensure integrity and compliance in security assignments.
Senior Consultant SAP Security, GRC Access Control
Senior SAP Security Consultant leading migration of SAP GRC Access Control to 12 Embedded. Requires expertise in SAP Security tools and methodologies for implementation.
Principal Enterprise Security Architect, Senior Associate
Principal Enterprise Security Architect at Intelance responsible for security architecture reviews and risk assessments for complex enterprises. Collaborating with governance and risk advisors and producing client-ready reports.
Presales Security Expert – Major Account Manager GSI
Presales Security Expert enabling the success of Fortinet's growing cybersecurity business. Collaborating with Account Managers and building technical relationships with customers for secure platform solutions.
Social Security Disability Benefits Expert
Disability Benefits Expert conducting consultations for SSI eligibility assessment and managing cases. Offering unbiased guidance on federal and state benefits through a remote work environment.