Software Security Engineer

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. The Software Security Engineer will embed security throughout the software development lifecycle, design secure systems, identify vulnerabilities, and reduce risk across the application portfolio while partnering closely with engineering teams.

Responsibilities:

• Embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio
• The role blends hands-on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down
• Shipping security improvements that meaningfully reduce risk in production

Requirements:

• • Bachelor's degree in Computer Science, Cybersecurity, or a related field
• • Five or more years of application security or security engineering experience
• • Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns
• • Hands-on experience performing code review across at least two major languages
• • Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling
• • Strong understanding of authentication, authorization, and cryptographic primitives
• • Experience with cloud security and modern infrastructure controls
• • Strong communication skills with technical and non-technical audiences
• • Proficiency in at least one programming language for tooling and automation
• • Experience working closely with engineering teams in an Agile environment
• • Industry certifications such as OSCP, OSCE, GWAPT, or CISSP
• • Experience with offensive security tooling and red-team operations
• • Bug bounty experience, public CVEs, or open-source security contributions
• • Familiarity with AI/LLM application security considerations
• • Exposure to regulated industries with strict compliance requirements