Security Engineer, Application Security

🕒 August 19

🇺🇸 United States – Remote

💵 $120k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GameChanger

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

⚽ Sports

☁️ SaaS

📱 Media

Sports • SaaS • Media

GameChanger is a sports technology company that provides a comprehensive app for live video streaming, scorekeeping, and team management for various sports including baseball, softball, basketball, football, volleyball, soccer, and lacrosse. The platform offers advanced scorekeeping features, in-app messaging, lineup sharing, and live streaming capabilities, making it a robust tool for coaches and fans alike. With its GameChanger Film Room and Streaming Kits, the company allows family and fans to never miss a moment of the action by following games in real-time from anywhere. GameChanger is a part of the DICK'S Sporting Goods family and partners with major sports organizations to enhance youth sports experiences. The app also features a content hub for company news and feature releases, and it promotes ease of use for coaches, players, and fans through its user-friendly interface and detailed insights.

📋 Description

• Operate application security across the software development lifecycle • Champion secure integration of generative AI and agentic AI tools into the product stack • Conduct security-by-design engagements for new features, APIs, platform initiatives, and infrastructure changes • Perform secure code reviews and provide remediation guidance • Establish secure REST and GraphQL API patterns • Maintain secure coding guidelines, API security standards, and security architectural patterns • Write security documentation and run engineering workshops or lunch-and-learns • Integrate and maintain security tooling across CI/CD pipelines • Enforce security quality gates in delivery pipelines • Harden GitHub Actions and runner environments • Leverage AI for engineering productivity and agentic security workflows • Ensure cloud infrastructure is securely defined and deployed through Terraform and Kubernetes • Implement and validate security controls for containerized workloads • Support WAF and CDN security controls for application endpoints • Operate the application vulnerability management lifecycle • Triage and prioritize findings from GHAS, NowSecure, Wiz, BugCrowd, and penetration tests • Identify systemic risks and facilitate cross-functional remediation initiatives • Track security KPIs including MTTR, vulnerability density, and CI/CD security coverage • Communicate security risks to engineering and business leadership • Participate in the weekly on-call rotation

🎯 Requirements

• 3+ years in application security engineering • Experience building and operating internal security developer platforms or tooling that reduces developer friction • Ability to use AI/ML-driven tools to enhance security effectiveness and scalability • Hands-on experience leading threat modeling engagements and designing paved roads • Experience integrating security tooling into CI/CD pipelines • Working knowledge of OWASP Top 10s for web, mobile, API, and LLM • Hands-on experience securing AWS deployments with container and Kubernetes security, IaC scanning, and policy-as-code approaches • Expertise in security-by-design using TypeScript, Swift, and/or Kotlin • Experience implementing secure primitives in iOS/Android ecosystems • Beneficial certifications: AWS Certified Security Specialty, CKS, GWEB, GMOB, or equivalent • Must be based in the United States, excluding AK, DE, HI, IA, LA, MS, MT, OK, and SC • Must be legally authorized to work in the United States

🏖️ Benefits

• Work remotely throughout the US or from the modern office in Manhattan, NY • Unlimited vacation policy • Paid volunteer opportunities • Technology stipend of $4,000 every 2 years • WFH stipend of $500 annually • Monthly physical, mental, wellness and learning stipend through Holisticly • Monthly lifestyle stipend through Fringe • Full health benefits: medical, dental, vision, prescription, FSA, HRA, HSA, and family/dependent coverage • Traditional and Roth 401(k) plans through Vanguard with immediate company match • Basic, supplemental, and dependent life insurance • Short-term and long-term disability leave • Company-paid parental leave: up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents • Family building benefits through Progyny • DICK'S Sporting Goods and family-of-brands teammate discount • Incentive and equity as part of total compensation for eligible roles