Senior Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇲🇽 Mexico – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Technosylva

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1997

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

<Technosylva> is a provider of AI-driven wildfire and extreme weather risk mitigation software that delivers real-time forecasting, predictive simulations, and incident management tools for electric utilities, fire agencies, and insurers. Their cloud-based products (Wildfire Analyst, Tactical Analyst, fiResponse) offer situational awareness, operational decision support, and risk quantification to help customers plan, operate, and respond to wildfire and severe weather events.

📋 Description

• Lead the evolution of Technosylva's Application Security program and roadmap • Define and improve secure SDLC processes across all engineering teams • Establish security-by-design practices integrated into development workflows • Drive adoption of secure coding standards, threat modeling, and security architecture reviews • Build measurable AppSec KPIs and leadership reporting • Improve GitLab/GitHub security capabilities and integrations, including SAST, DAST, dependency scanning, container scanning, secrets detection, and IaC security workflows • Embed security into CI/CD pipelines and define risk-based security gates and exception processes • Partner with developers, architects, and technical leads to remediate vulnerabilities, translate security requirements into actionable tasks, and conduct code reviews • Establish application vulnerability management processes covering triage, business-risk prioritization, SLAs, closure tracking, and executive reporting • Drive AppSec initiatives from planning through execution across Engineering, Infrastructure, Product, and Security teams • Produce documentation and implementation plans • Deliver secure coding guidance, workshops, awareness sessions, and mentoring for junior engineers • Act as a trusted security advisor to technical and non-technical stakeholders

🎯 Requirements

• Minimum 10 years of experience across Application Security, S-SDLC/DevSecOps, or Software Engineering/Security Engineering • Proven track record driving AppSec programs in medium or large organizations within modern SDLC, cloud-native, and SaaS environments • Strong technical expertise in OWASP Top 10, API security, multi-tenant application security, threat modeling, and security architecture reviews • Hands-on experience with CI/CD pipeline security, SAST/DAST, SCA, secrets management, container/Kubernetes security, and IaC security • Strong understanding of software engineering practices and modern development frameworks/APIs • Ability to read and review production-grade code • Project management, executive-level reporting, documentation practices, and prioritizing work based on business risk • Excellent communication, coordination, and interpersonal skills • High level of ownership, autonomy, maturity, and proactive problem-solving • Penetration testing, red teaming, or offensive security experience preferred • Experience leading vulnerability management programs, security automation, and scripting preferred • Practical experience applying AI/ML tools in development and cybersecurity preferred • Specialized experience with GitLab/GitHub Security features preferred • Security certifications such as CSSLP, CISSP, OSCP, GIAC, or Azure/AWS certifications preferred

🏖️ Benefits

• Competitive annual salary • Private health insurance • Flexible benefits plan, allowing you to tailor part of your compensation package to your personal needs • Annual bonus based on individual performance and company results • Flexible working hours • Remote work options