Senior Application Security Engineer ID70122

AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups. They are seeking a Senior Application Security Engineer to develop AI-enabled secure code scanning and integrate security tooling into SDLC within a large-scale financial services environment.

Responsibilities:

• Develop AI-enabled secure code scanning solutions and deliver “Golden Images” to drive secure-from-the-start adoption
• Continuously tune security scanning tools, including SAST, DAST, and SCA, to reduce noise and provide high-confidence security alerts
• Enable automated development of secure coding patterns and integrate them into traditional and agentic SDLC workflows
• Work directly with software engineers using Java and Python to provide code-level remediation guidance
• Improve application security posture through threat modeling, architecture reviews, and secure development practices
• Leverage LLMs, AI agents, and automated coding assistants to streamline vulnerability triage and remediation processes
• Support adoption of modern application security standards across engineering teams

Requirements:

• 5+ years of experience in Application Security, DevSecOps, Security Engineering, or related fields
• Deep, hands-on expertise deploying and tuning modern application security testing tools, including SAST, DAST, and SCA
• Ability to work autonomously and mentor Middle 1 engineers
• Advanced experience with application threat modeling and architecture reviews
• Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triage and remediation
• Strong understanding of secure software development practices and SDLC integration
• Upper-intermediate English level
• Advanced knowledge of Cloud-Native Application Protection Platforms (CNAPP) such as Wiz
• Deep understanding of advanced vulnerability scoring models, including EPSS and CVSS
• Experience working with complex data governance, compliance, and security frameworks in highly regulated environments