Application Security Engineer II

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Riva Scientific

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Riva Scientific is a company that offers innovative solutions in the Life Sciences and Biotechnology sectors, as well as Information Technology services. They provide a comprehensive range of products and services including managed services, strategic consulting, and staffing solutions tailored to the unique challenges faced by Pharmaceuticals and Technology companies. Riva Scientific specializes in laboratory automation, software validation, custom application development, and staffing, helping clients navigate complex regulatory environments and improve operational efficiencies.

📋 Description

• Secure AWS or comparable cloud-native environments using modern development practices • Secure AI/ML-powered systems against prompt injection, model supply chain, and agentic-workflow risks • Write and read production code • Apply web application security practices across authentication/authorization, cryptography, secure API design, microservices, and containers • Conduct threat modeling and security architecture reviews • Collaborate with engineering, DevOps, and product teams to influence secure development decisions • Help define scope within a growing security program • Build security telemetry pipelines or vulnerability management frameworks • Support compliance auditability and vulnerability disclosure processes

🎯 Requirements

• 5+ years of experience in application security engineering roles • Experience securing AWS or comparable cloud-native environments with modern development practices • Experience securing AI/ML-powered systems, or a clear ability to ramp fast on prompt injection, model supply chain, and agentic-workflow risks • Strong programming skills in Python, Go, Java, or JavaScript/TypeScript; ability to write and read production code • Expertise in web application security including OWASP Top 10, authentication/authorization, cryptography, and secure API design • Experience securing modern architectures including microservices, containers, and cloud-native systems • Hands-on experience with threat modeling and security architecture reviews • Ability to influence and collaborate cross-functionally with engineering, DevOps, and product teams • Strong written communication • Experience working in fast-paced or startup environments • Comfortable defining scope in a growing security program • Hands-on experience with commercial security tools including Veracode, Checkmarx, SonarQube, Wiz, Semgrep, and Burp Suite • Prior experience building security telemetry pipelines or vulnerability management frameworks • Exposure to SOC 2 and ISO 27001 compliance frameworks and how development decisions affect auditability • Familiarity with bug bounty programs and vulnerability disclosure processes