43 application security jobs at 31 companies in Durham, NC
3mo
Save
Mark Applied
Hide
3mo
Senior Application Security Engineer
Spring or Durham or Alpharetta or Fort Collins
$106k-$243k/yrHybridFull Time
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
5+ YOE5–8+ years in application security; CI/CD security; SBOM/NIST/SSDF knowledge; secrets management; WAF and API security; SAST/DAST/SCA; cloud security; programming in Python/Java/Go/Node.js.
Research Triangle Park or San Jose or New York City or New York or Washington or Canada
$167k-$211k/yrHybridFull Time
CiscoNASDAQ: CSCO: Develops and sells networking hardware and cybersecurity software.
1+ YOEAdvanced AI research experience applied to networking/security or related computer science areas; ability to design and run experiments, build and evaluate models, and communicate research to cross-functional teams.
Cary or Glasgow or United States or United Kingdom
HybridFull Time
SAS: Provider of business analytics, artificial intelligence, and data management software.
8+ YOE8+ years in secure software development or architecture, 4+ years adopting software security best practices, Bachelor\u0002s in CS/EE or related, security certifications (e.g., CISSP, CISM, CCSP) preferred, proficiency with multiple programming languages and cloud security.
C/C++, Java, Python, JavaScript, PHP, Golang, OWASP Top 10, CVSS, CWE, SANS-25, MITRE, Azure, AWS, GCP, Microsoft Cloud Security Benchmark (MCSB), Snyk, Black Duck, Sonar, ZAP, BurpSuite, Kali, Nessus
SAS Institute: Provides advanced analytics, AI, and data management software solutions.
8+ YOE8+ years in secure software development or architecture, 4+ years adopting software security best practices, bachelor\u0002s in CS/EE or related, security certifications (SANS/GIAC/ISACA/CEH/CCSP/CSSLP/CISM/CISSP) and knowledge of attacker TTPs and secure SDLC.
C, C++, Java, Python, JavaScript, PHP, Golang, OWASP Top 10, CVSS, CWE, SANS-25, Azure, AWS, GCP, Microsoft Cloud Security Benchmark (MCSB), Snyk, Black Duck, Sonar, ZAP, BurpSuite, Kali, Nessus
SAS Institute: Provider of advanced analytics, AI, and data management software.
8+ YOE8+ years in secure software development or architecture, 4+ years adopting software security best practices, bachelor's in CS/EE or related, relevant security certifications (CISSP, CISM, CSSLP, CCSP, CEH) and knowledge of MITRE attacker TTPs.
MITRE, OWASP Top 10, CVSS, CWE, SANS-25, Microsoft Cloud Security Benchmark (MCSB), C, C++, Java, Python, JavaScript, PHP, Golang, Azure, AWS, GCP, Snyk, Black Duck, Sonar, ZAP, BurpSuite, Kali, Nessus
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Cyber Security Engineer I - Application Penetration Testing Specialist
Raleigh or North Carolina or Arizona or Texas
RemoteFull Time
First Citizens BankNasdaq: FCNCA: Provides full-service consumer, commercial, and wealth management banking.
2+ YOEBachelor's degree with 2 years in systems engineering/networking/information security OR HS/GED with 6 years; expertise in application penetration testing, web app/database testing, network administration, Linux/Windows, and report writing; proficiency with Microsoft Office.
Kali Linux, Burp Suite, Jira, Confluence, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Outlook, OWASP, PTES
Arvato Systems: Provides IT consulting, software development, and managed IT services.
10+ YOE5+ Mgmt10+ years in cybersecurity, 5+ years leading security architecture/engineering, bachelor's degree or equivalent, experience across cloud, application, identity, data domains, knowledge of security frameworks and vendor evaluations.
BandwidthNASDAQ: BAND: Provides cloud-based communications software and network services for enterprises.
NetSuite expertise, experience with low-code/no-code platforms, JavaScript/Python scripting, systems integration (Salesforce, S3, Snowflake), AI tools (OpenAI, Anthropic, Flowise, Langchain), and data security best practices.
United States or Raleigh or New York City or Brussels or Wrocław
$168k-$210k/yrRemoteFull Time
Collibra: Provides a data intelligence platform for governance and discovery.
5+ YOE5+ years application/product security experience, 2+ years securing Java/Python/JavaScript apps, proficient with SAST/SCA/IAST/DAST and CI/CD, cloud and container experience, AI security knowledge; US citizenship required.
Bertelsmann: Global media, services, and education conglomerate.
10+ YOE5+ Mgmt10+ years cybersecurity experience with 5+ years leading security architecture/engineering; bachelor’s in related field or equivalent; experience across cloud, application, identity, data, and infrastructure security; experience with audits and regulatory frameworks.
RELXLondon Stock Exchange: REL: Provides information-based analytics and decision tools for professional customers.
7+ YOE7+ years in application security or security-focused software engineering; threat modeling; SAST/DAST/SCA; coding ability; experience in regulated industry; ability to explain findings; collaborative.
SiemensXETRA: SIE: Manufactures industrial automation, infrastructure, and energy technology systems.
7+ YOE7+ years in cybersecurity with 3–5 years product/application security, vulnerability management, secure SDLC, cloud SaaS experience, incident response, and knowledge of security frameworks; bachelor's degree or equivalent experience.
3+ YOE3-7 years of professional full-stack web development; Python backend; React/Next.js frontend; relational DB design; Docker and cloud (GCP); security, TDD; data architecture migration.
Python, React, Next.js, Docker, GitLab CI/CD, Google Cloud, SQL
Allied Universal: Global provider of physical security and facility management services.
Part-time security role at government sites requiring high school diploma, background and drug screen, age minimums (18/21), ability to use tablet/computer, and adherence to state licensing where applicable.