Application Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DecisionPoint Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

🎖️ Defense

💼 Consulting

📦 Logistics

Defense • Consulting • Logistics

DecisionPoint Corporation is a Service Disabled Veteran Owned Small Business specializing in IT modernization and digital transformation for government agencies. They provide comprehensive services including cybersecurity, health IT, and intelligent automation solutions, aimed at improving operational efficiency and effectiveness while ensuring secure cloud migration. Their Centers of Excellence approach drives mission success by addressing the most pressing challenges faced by government entities through innovative technology and expert support.

📋 Description

• Conduct secure code reviews of application logic, API endpoints, CMS modules, and backend integrations • Perform API security assessments covering authentication, authorization, data handling, and boundary protections • Support CMS hardening by reviewing templates, modules, configurations, and custom components • Integrate security requirements into CI/CD pipelines using SAST/DAST tools, dependency scanning, and automated controls • Manage secrets handling, encryption policies, and secure storage of API keys, tokens, and credentials • Conduct static and dynamic application security testing and vulnerability assessments • Validate vulnerability remediation • Provide secure coding guidance to developers, architects, and product teams • Collaborate with DevSecOps and cloud engineers on secure build and deployment patterns • Perform threat modeling and recommend mitigations for high-risk application features • Review and validate authentication flows, SSO integrations, and identity protections • Assist with security documentation, including test results, remediation plans, and secure configuration records • Support continuous monitoring, log analysis, and triage of application-layer security alerts • Participate in sprint teams, code review cycles, and architecture discussions to embed security early

🎯 Requirements

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation • Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field • Minimum 7 years of experience in application security engineering, secure software development, or cybersecurity • Experience conducting code reviews, application penetration testing, or API security testing • Experience with static and dynamic testing tools, dependency scanning, and software composition analysis • Experience supporting secure CI/CD pipeline integration and DevSecOps practices • Experience implementing secure secrets management, encryption, and authentication protections • Strong understanding of OWASP Top 10, secure coding principles, and application-layer attack vectors • Experience with SAST/DAST tools, dependency scanners, and code review workflows • Knowledge of API security, token-based authentication, and secure data handling • Familiarity with CMS structures, template security, and module-level risk considerations • Understanding of identity and access management, certificate management, and secure authentication flows • Required certification: Security+ or CISSP or CCSP • Preferred: AWS Security Specialty; GIAC secure coding or cloud security certifications; Certified Ethical Hacker (CEH) • Preferred experience with AWS cloud-native application security tools, container security, Kubernetes workload protections, microservices security, modern CI/CD platforms, and DevSecOps automation • Strong analytical and problem-solving skills • Ability to clearly communicate technical risks, secure coding guidance, and remediation recommendations • Strong attention to detail • Ability to work collaboratively with developers, cloud engineers, PMO staff, and mission stakeholders