Principal Application Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $172k - $240k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CDW

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1984

💼 Consulting

🏥 Healthcare

📚 Education

💰 Post-IPO Equity on 2015-07

Consulting • Healthcare • Education

CDW is a leading provider of technology solutions, offering a comprehensive range of products and services to address the needs of enterprises, government, healthcare, and education sectors. They specialize in providing IT infrastructure services, managed services, and security solutions. CDW partners with top technology brands to deliver customized solutions that enhance business productivity and performance across various industries. With a strong focus on digital transformation, security, and cloud solutions, CDW supports businesses in navigating the complexities of modern IT environments. Their expertise spans several domains, including digital workspaces, cybersecurity, and enterprise solutions, making CDW a key partner in driving technological advancements.

📋 Description

• Lead high-impact secure code reviews, threat models, and secure design assessments for applications, APIs, and shared services • Translate technical risk into clear guidance for engineers, technical leaders, and business stakeholders • Drive design, integration, and continuous improvement of application security controls across CI/CD platforms, workflows, and environments • Identify control gaps, coverage weaknesses, and engineering friction across the software delivery lifecycle • Drive remediation through automation, platform improvements, and secure-by-design patterns • Define, advocate for, and build secure coding standards, reference architectures, playbooks, tooling, and automations • Serve as a senior technical partner to engineering teams by influencing design decisions and guiding remediation strategy • Advance CDW’s approach to securing AI-enabled development and applications • Evaluate emerging AI security risks and define practical guardrails • Provide subject matter expertise in API security, including authentication, authorization, protections, monitoring, and secure integration patterns • Partner with web and platform teams to design, deploy, and tune WAF rules and policies • Mentor others, raise standards, and drive organization-wide improvements in application security

🎯 Requirements

• 10+ years of experience in Application Security Engineering • Deep, hands-on expertise in secure application architecture and design, secure coding practices, code-level vulnerability analysis, and threat modeling • Background in software engineering, application development, or architecture • Strong command of authentication, authorization, session management, API security, secrets management, and common application vulnerabilities and exploit patterns • Hands-on experience with modern technology stacks such as C#, Java, Python, JavaScript or TypeScript, Go, or similar • Strong experience integrating security into CI/CD pipelines, developer workflows, and engineering platforms • Ability to independently investigate complex technical problems, identify root causes, and drive practical remediation • Strong written and verbal communication skills • Strong sense of ownership and accountability • Experience defining standards, playbooks, secure reference architectures, or scalable practices • Experience with software supply chain security, including dependency risk management, build pipeline hardening, SBOM, artifact integrity, provenance, and package governance, a plus • Hands-on experience with AI security, including securing AI-enabled applications or advising engineering teams on secure use of AI or LLM-based capabilities, a plus • Familiarity with Zero Trust, secure platform engineering, and policy-as-code approaches, a plus • Prior experience serving as an Application Security Champion, Security Champion, embedded security lead, principal engineer, or senior engineer responsible for driving security within product or application teams, a plus • Experience with runtime application protection, exploit prevention, threat detection technologies, and abuse case analysis, a plus • Experience influencing secure development practices across decentralized or federated engineering organizations, a plus • Experience defining and using application security metrics, maturity measures, or risk-based reporting, a plus • Experience designing security controls for cloud-native and distributed systems running in Azure, AWS, or GCP, a plus • Experience designing, deploying, or tuning Akamai protections, a plus • Experience with reviewing and securing IaC (Terraform or similar), a plus

🏖️ Benefits

• Annual bonus target 15% subject to terms and conditions of plan • Benefits overview provided at https://cdw.benefit-info.com/ • Salary ranges may be subject to geographic differentials