2mo
Save
Mark Applied
Hide
Senior Manager, Application Security
New York, New York, United States
$190k-$220k/yr HybridFull Time
10+ YOE5+ Mgmt10+ years in application security; hands-on with web apps, APIs, cloud, containers; leadership of enterprise security programs; strong collaboration and communication.
SAST, DAST, SCA, API testing, Container security, Kubernetes security, CI/CD security, Cloud security, Software supply chain security, Security automation
1mo
Save
Mark Applied
Hide
Application Security Manager
Chicago or New York City
HybridFull Time
4+ YOE4+ years application security experience; experience with SAST/DAST/SCA, secure code review, CI/CD integrations, OWASP, cloud (AWS/Azure) and containerization; strong developer enablement and communication skills; bachelor’s preferred.
SAST, DAST, SCA, secrets scanning, Azure DevOps, GitHub Enterprise, GitHub Advanced Security, Azure Pipelines, GitHub Actions, Snyk, Cycode, Apiiro, Burp Suite, AWS, Azure, Docker, Kubernetes, Python, Java, C#
2d
Save
Mark Applied
Hide
Senior Application Security Engineer
London or New York or Pune or Toronto
$125k-$165k/yr OnsiteFull Time
5+ YOE5+ years application security experience; hands-on SAST/DAST/SCA, CI/CD integration, pentesting, threat modeling, secure coding guidance, and AWS security controls.
GitHub Advanced Security (GHAS), CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode, Python, Java, TypeScript, Go, IAM, VPC, KMS, GuardDuty, CloudTrail, Claude
3w
Save
Mark Applied
Hide
Senior Application Security Architect
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yr HybridFull Time
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
1w
Save
Mark Applied
Hide
Staff Application Security Engineer
New York or Miami or United States
$168k-$240k/yr HybridFull Time
7+ YOEExpertise in threat modeling, secure design/code review, penetration testing, application security controls, familiarity with regulated environments, strong communication, and experience building AI security tooling.
Scala, Java, Go, Python, SLSA, OWASP SPVS, CI/CD
5d
Save
Mark Applied
Hide
Application Security Senior Manager
Annapolis Junction or New York City or Annapolis or Washington
$125k-$233k/yr OnsiteFull Time
10+ YOE5+ Mgmt10+ years in application development and software security,5+ years leading application security teams,experience with SDLC,threat modeling,DAST/SAST/IAST/SCA,CI/CD,AI scanning,knowledge of OWASP/NIST,Bachelor's degree.
DAST, SAST, IAST, SCA, CI/CD, Mythos, OWASP, NIST
2w
Save
Mark Applied
Hide
IT Application Security Analyst
Bethlehem, Pennsylvania, United States
OnsiteFull Time
3+ YOE3+ years application security or secure software engineering experience; hands-on SDLC/secure-development frameworks, SAST/DAST/SCA tool integration, knowledge of PCI DSS and privacy regs, strong communication.
SAST, DAST, SCA, Snyk, Checkmarx, CI/CD, Vault, Azure Key Vault, NIST SSDF, OWASP ASVS, OWASP Top 10
2mo
Save
Mark Applied
Hide
Lead Application Security Engineer
New York, New York, United States
$190k-$250k/yr OnsiteFull Time
10+ YOE10+ years in application security; strong software development background; experience with SCA/SAST/DAST, secure SDLC; familiarity with cloud, leading security standards; CISSP/CSSLP etc preferred.
SCA, SAST, DAST, Snyk, GitHub, Burp Suite
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or New York City or Pittsburgh
$228k-$290k/yr HybridFull Time
10+ YOE10+ years in application security, expertise in threat modeling, secure code review, vulnerability management, incident response, programming (Python, NextJS), cloud security (GCP), Kubernetes, and AI/ML security; strong communication and leadership skills.
Python, NextJS, GCP, Kubernetes
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Los Angeles or New York or San Francisco
$165k-$190k/yr HybridFull Time
Production Python experience, strong hands-on application security (SAST/DAST/SCA), threat modeling, CI/CD automation, container/AWS/Kubernetes security, API security, and LLM risk mitigation.
Python, Java, Rust, AWS, Kubernetes, CI/CD, SAST, DAST, SCA, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, LLM
2w
Save
Mark Applied
Hide
Sr. Application Security Manager
New York City, New York, United States
$153k-$260k/yr OnsiteFull Time
10+ YOE3+ Mgmt10+ years in information security with technical management experience; expertise in application, API, cloud, supply chain or AI/ML security; hands-on AppSec tooling and scripting for automation.
Ox Security, Snyk, Veracode, Checkmarx, Wiz, Cursor, Claude Code, VS Code, GitLab, GitHub, ArgoCD, Terraform, Python, PromptFlow, OWASP Application Security Verification Standard (ASVS), OWASP API Security Top 10, OWASP Top 10 for LLMs, NIST AI RMF
1w
Save
Mark Applied
Hide
Senior Application Security Engineer
New York, New York, United States
$220k-$235k/yr HybridFull Time
5+ YOE5+ years hands-on security engineering with application/product security, strong coding skills, AppSec toolchain experience (secrets, SCA, SAST), cloud (AWS/GCP) and Cloudflare experience, OAuth/SaaS hardening, GitHub/CICD security, and strong communication.
AWS, GCP, Cloudflare, Google Workspace, GitHub, Rippling, Slack, Claude
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
2mo
Save
Mark Applied
Hide
Application Security Engineer, Vice President
Jersey City, New Jersey, United States
$140k-$203k/yr HybridFull Time
5+ YOE5+ years in application security, DAST/SAST/SCA, secure coding in Java/Python, CI/CD automation, compliance with NIST/PCI-DSS/SOX; AI/ML security experience preferred.
Invicti, Veracode, Burp Suite, AppScan, Fortify, Netsparker, Acunetix, Python, Java, Bash, PowerShell
1w
Save
Mark Applied
Hide
Application Security Engineer / Architect (DevSecOps)
New York City, New York, United States
$175k-$210k/yr HybridFull Time
7+ YOE7+ years in DevSecOps/application or cloud security, hands-on CI/CD and cloud experience, SAST/DAST/SCA tool use, container/Kubernetes security, scripting and IaC familiarity, strong communication.
GitHub Actions, GitLab CI, Jenkins, AWS, Azure, GCP, Semgrep, Snyk, Checkmarx, Veracode, Kubernetes, Python, Bash, Terraform, CloudFormation, Pulumi, OPA/Rego, Checkov, OWASP Top 10, CWE
1mo
Save
Mark Applied
Hide
Application Security Engineer, AWS Security
New York, New York, United States
$153k-$208k/yr OnsiteFull Time
2+ YOE2+ years IT security experience or bachelor's in computer science; knowledge of system vulnerabilities, penetration testing, web protocols, secure coding, identity management, and strong communication and troubleshooting skills.
AWS, C++, HTTP, IPsec, Java, Perl, Python, REST, SOAP, TCP/IP, UDP, WSDL, XSD
2mo
Save
Mark Applied
Hide
Security engineer, application security
San Francisco or New York City
$119k-$210k/yr HybridFull Time
4+ YOE4+ years in application security; strong coding in Python/Java/Go/JavaScript/TypeScript; SAST/DAST in CI/CD; threat modeling; secure SDLC; security reviews; automation.
Python, Java, Go, JavaScript, TypeScript, SAST, DAST, CI/CD, DevSecOps
3w
Save
Mark Applied
Hide
Vulnerability Management & Application Security Liaison SPOC
Iselin or Charlotte
HybridContract
10+ YOE10+ years experience in application and infrastructure security; strong knowledge of AppSec tooling, containers, databases, middleware, IDPs and DevSecOps; excellent communication and governance skills.
Checkmarx, Black Duck, OpenShift Container Platform (OCP), ServiceNow, Internal Developer Platform (IDP), Linux, Windows, Oracle, SQL Server, PostgreSQL, Apache, Tomcat, WebSphere
3w
Save
Mark Applied
Hide
Staff+ Application Security Engineer - M&A
San Francisco or Seattle or New York City
$320k-$485k/yr HybridFull Time
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Python, Go, Rust, TypeScript, Claude, SAST, DAST, LLMs, bug bounty
3d
Save
Mark Applied
Hide
Staff Security Application Engineer
Chicago or Scottsdale or San Francisco or New York City
$149k-$218k/yr HybridFull Time
8+ YOE8+ years network security experience with 5+ years in proxy and DLP; hands-on with Microsoft Defender, Palo Alto Prisma Access, Netskope; scripting (PowerShell, Python); experience with compliance and control testing.
Microsoft Defender, Palo Alto Prisma Access, Netskope, PowerShell, Python