AppSec Engineer

About This Opportunity

We are representing a confidential technology consulting organization in their search for an AppSec Engineer to join their remote team. This role offers the opportunity to embed security throughout the software development lifecycle, partnering directly with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across production applications.

As an AppSec Engineer, you'll blend hands-on offensive and defensive security skills with strong collaboration, helping development teams build secure software efficiently. This is a 100% remote, full-time W2 position open to candidates located anywhere in the United States.

Responsibilities

• Embed security practices throughout the software development lifecycle
• Partner with engineering teams to design and review secure system architectures
• Perform code reviews across multiple programming languages to identify vulnerabilities
• Implement and maintain SAST, DAST, SCA, and CI/CD-integrated security tooling
• Identify, assess, and help remediate security vulnerabilities in production applications
• Build automation and tooling to scale security improvements
• Communicate security risks and recommendations to technical and non-technical stakeholders
• Work within Agile development environments to ship meaningful security improvements
• Apply cloud security best practices and modern infrastructure controls

What We're Looking For

Required:

• Bachelor's degree in Computer Science, Cybersecurity, or related field
• 6+ years of application security or security engineering experience
• Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns
• Hands-on experience performing code review across at least two major programming languages
• Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling
• Strong understanding of authentication, authorization, and cryptographic primitives
• Experience with cloud security and modern infrastructure controls
• Proficiency in at least one programming language for tooling and automation
• Excellent communication skills with technical and non-technical audiences
• Experience working closely with engineering teams in Agile environments

Preferred:

• Industry certifications such as OSCP, OSCE, GWAPT, or CISSP
• Experience with offensive security tooling and red-team operations
• Bug bounty experience, public CVEs, or open-source security contributions
• Familiarity with AI/LLM application security considerations
• Exposure to regulated industries with strict compliance requirements

Visa Status: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. Our client is unable to sponsor new H-1B visa petitions for this position.

How We Work With You

When you apply through Get A Job.ai, our talent team will review your background and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. We coordinate all communication and interview scheduling on your behalf.

Important: Please do not attempt to contact the client directly. All applications and inquiries must go through Get A Job.ai to be considered for this role.

Pay

Pay via Get A Job.ai: $80,000–$100,000 annually

This is a full-time, direct W2 position with our client.

Get A Job.ai is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected characteristic.