Remote Senior Application Security Engineer

We are looking for a Senior Application Security Engineer to modernize vulnerability management at scale within a highly regulated financial services environment.

You will govern and analyze large vulnerability datasets from tools including Wiz, Checkmarx, and Snyk, build automated triage and remediation workflows using Python and AI‑assisted agents, and embed security intelligence directly into CI/CD pipelines.

The role requires deep AppSec tooling expertise, risk‑based prioritization using CVSS and EPSS, and the ability to provide code‑level remediation guidance to Java development teams.

Structure, analyze, and govern the massive output of vulnerability data from across the enterprise portfolio, ensuring it is highly contextualized and ready for consumption by developers and automated systems.

Triage and prioritize vulnerabilities utilizing data‑driven scoring models (CVSS, EPSS) combined with contextual business and infrastructure risk.

Continuously tune security scanning tools (SAST, DAST, SCA) and data pipelines to eliminate noise and false positives, delivering only high‑confidence alerts.

Work directly with software engineers in their native tech stack (Java, Python) to provide specific, code‑level remediation guidance, focusing on minimizing developer friction.

Act as a DevSecOps evangelist, actively bridging the gap between stringent security mandates and Agile delivery velocity.

5+ years of experience in application security, software engineering, or DevSecOps, with at least 2+ years operating within highly regulated enterprise environments (Finance, Healthcare, Defense).

• Deep, hands‑on expertise deploying, tuning, and consuming APIs from modern application security testing tools (SAST, DAST, SCA) and CNAPP platforms (e.g., Wiz, Checkmarx, SonarQube, Snyk).
• Strong proficiency in Python (or Go) to build custom scripts, automate vulnerability data triage, and manipulate API data from security tooling.
• High proficiency in reading and reviewing enterprise application code, specifically Java.
• Experience utilizing LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging, data classification, or remediation code generation.

Strong familiarity operating within Agile/Scrum delivery models and utilizing Jira for automated backlog management.

Exciting projects: Join projects with modern solutions development and top‑tier clients, including Fortune 500 enterprises and leading product brands.

Flextime: Tailor your schedule for an optimal work‑life balance, with options for remote work and versatile hours.

#