Application Security Engineer

🔥 8 minutes ago

🇺🇸 United States – Remote

💵 $70.3k - $101.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CivicPlus

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2001

📋 Compliance

🏛️ Government

☁️ SaaS

Compliance • Government • SaaS

CivicPlus is a leading provider of technology solutions for local governments, aimed at transforming the way municipalities operate and engage with their residents. With over 25 years of experience, CivicPlus offers a broad range of software solutions designed to automate processes, digitize services, and enhance civic experiences, all while ensuring compliance and accessibility. Their offerings include municipal websites, mass notification systems, social media archiving, 311 CRM system, and agenda and meeting management, among others. CivicPlus focuses on delivering a modern government experience, providing flexible, scalable, and customizable solutions to meet the complex needs of public sector operations. Their technology is trusted by over 10,000 local governments and is designed to improve communication, streamline workflows, and increase civic participation and satisfaction.

📋 Description

• Perform security code reviews, threat modeling, and architecture reviews across development projects as part of a secure SDLC • Collaborate with development teams to integrate secure design, secure coding standards, and security controls across the SDLC • Identify, track, and validate vulnerabilities and security defects from security testing and scanning • Partner with development teams to prioritize remediation within compliance timeline requirements • Coordinate external, independent penetration testing of production environments • Lead application security testing, including SAST, DAST, and IAST • Serve as a subject matter expert on application security vulnerabilities, including the OWASP Top 10, and emerging threats

🎯 Requirements

• 3–7 years of experience in application security, secure development, penetration testing, or a related field • Hands-on experience with application/security testing tooling (SAST, DAST, and/or IAST) • Experience integrating secure design principles into change management, code review, CI/CD pipelines, and secure development operations • Security+, GSEC, GSSP, or equivalent certification • Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related field (preferred) • Familiarity with secure coding practices across multiple languages, such as C#, Go, Java, JavaScript, or Python • Knowledge of cloud-native and SaaS application environments • AI-forward mindset with demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality • Demonstrated ability to effectively use AI tools to enhance productivity and outcomes • Applicants must be authorized to work in the US • CivicPlus is currently unable to provide visa sponsorship for this position now or in the future

🏖️ Benefits

• Comprehensive health insurance • Dental insurance • Vision insurance • Flexible Time Off • 401(k) plan