FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Security Engineer – Application Security
Quartermaster. Own security for cloud services, APIs, data pipelines, and applications across distributed, edge-deployed systems .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security, including secure software development lifecycle, threat modeling, and vulnerability remediation. Proficient in modern programming languages and security tooling to ensure robust application security across cloud environments.
Highest-signal resume keywords
Application Security ExpertiseSecure Software Development LifecycleSAST, DAST, SCA, CodeQL IntegrationThreat Modeling and Security Design ReviewsVulnerability Remediation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PythonGoJavaJavaScriptTypeScriptRustC/C++OWASP Top 10Secure Coding PracticesMicroservices Security
Soft Skills
Excellent Written CommunicationExcellent Verbal Communication
Tools & Technologies
CI/CD Security ToolingKubernetesInfrastructure-as-CodeBug Bounty ProgramsSecret-Scanning
Certifications & Qualifications
OSCPOSWEGWAPTGWEBCSSLPBurp Suite Certified Practitioner
Industry Keywords
Cloud ServicesApplication Security AssessmentsVulnerability DisclosureSoftware Supply Chain SecurityNIST 800-171CMMCEmbedded SoftwareEdge ComputingCritical Infrastructure
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityGoogle Cloud PlatformGRPCIoTJavaJavaScriptKubernetesMicroservicesPythonRustTypeScriptC++Go
About the role
Key responsibilities & impact- Own security for cloud services, APIs, data pipelines, and applications across distributed, edge-deployed systems
- Lead threat modeling and secure design reviews
- Perform secure code reviews and whitebox, greybox, and blackbox application security assessments
- Build, integrate, and tune SAST, DAST, SCA, secret-scanning, CodeQL, and other CI/CD security tooling
- Triage, prioritize, and drive remediation of application vulnerabilities with engineering teams
- Develop automation and paved-road tooling to make secure development the default
- Advise engineers and architects as the application security subject-matter expert
- Define and mature the secure software development lifecycle, secure coding standards, and security requirements
- Own or support vulnerability disclosure and bug bounty processes
- Strengthen software supply-chain security, including dependency management, artifact and commit signing, and build/pipeline integrity
- Partner with security operations on application-layer incidents
- Deliver developer-focused security training and promote a security-aware engineering culture
Requirements
What you’ll need- 5–8 years in application security, product security, or software engineering with a strong security focus
- Software development experience in one or more modern languages, including Python, Go, Java, JavaScript/TypeScript, Rust, or C/C++
- Ability to read and reason about production code
- Experience evaluating code for vulnerabilities and weaknesses
- Experience leading threat modeling and security design reviews
- Hands-on experience with SAST, DAST, SCA, CodeQL, and CI/CD integration
- Strong understanding of OWASP Top 10, CWE, common vulnerability classes, and secure coding practices
- Experience securing microservices/SOA, REST/gRPC APIs, containers, and AWS, Azure, or GCP environments
- Experience performing black-box and grey-box testing of web applications and APIs
- Proven ability to drive vulnerability remediation with engineering teams
- Excellent written and verbal communication skills
- Must be a U.S. citizen
- Bachelor’s degree in Computer Science, Cybersecurity, or equivalent hands-on experience
- Active U.S. security clearance, or eligibility and willingness to obtain and maintain one (preferred)
- Industry certifications such as OSCP, OSWE, GWAPT, GWEB, CSSLP, or Burp Suite Certified Practitioner (preferred)
- Experience with secure-by-default frameworks, software supply chain security, infrastructure-as-code, Kubernetes, bug bounty programs, CVEs, embedded/edge/robotics/IoT software, NIST 800-171, CMMC, or startup/defense/intelligence/critical-infrastructure environments (preferred)
Benefits
Comp & perks- Comprehensive medical, dental, and vision benefits
- Flexible remote work
- Significant autonomy to shape the secure SDLC, tooling, and standards
- Career growth in a rapidly scaling defense-tech company
- Work with cutting-edge AI and robotics systems
- Mission-driven, fast-moving team