Principal Application Security Engineer

Principal Application Security Engineer | Hybrid

We're hiring for an enterprise-level company that is undergoing a significant technology transformation, aiming to innovate within a rapidly evolving industry. This employer is committed to defining new technology standards and modernizing development and deployment processes at scale.

The Role

• Lead the design and implementation of application security architecture across enterprise platforms.
• Embed robust security controls and best practices into CI/CD pipelines and DevSecOps workflows.
• Evaluate, implement, and manage application security tooling such as SAST, DAST, and IAST.
• Define and maintain application security metrics, reporting, and dashboards for stakeholders.
• Collaborate with third-party vendors to assess and validate application security capabilities.
• Provide expert guidance and mentorship on application security standards and risk management.

What You'll Need

• Bachelor's Degree in Computer Science, MIS, Business Administration, or related field, or equivalent experience.
• 7+ years of relevant experience in application security.
• Deep understanding of application security principles and secure coding practices.
• Experience designing and implementing security controls within CI/CD pipelines.
• Proficiency with various application security technologies (e.g., SAST, DAST, IAST, API security, RASP).
• Relevant certifications such as CISSP, CISA, or CISM are required.

What's On Offer

• Competitive total compensation package.
• Comprehensive benefits including Medical, Dental, Vision, Life Insurance, and Short Term Disability.
• Company match on 401K and a Stock Purchase Plan.
• Paid Vacation, Holidays, and Personal Days.

Key skills/competency

• Application Security
• CI/CD Security
• DevSecOps
• SAST
• DAST
• IAST
• API Security
• RASP
• Security Architecture
• Risk Management