HiringCafe
Join our community

257 application security jobs at 151 companies in Norwalk, CT

2mo
Save
Mark Applied
Hide
Senior Manager, Application Security
New York, New York, United States
$190k-$220k/yr HybridFull Time
Simpson Thacher & Bartlett
Simpson Thacher & Bartlett: Provides legal advisory and litigation services to global corporations.
10+ YOE5+ Mgmt10+ years in application security; hands-on with web apps, APIs, cloud, containers; leadership of enterprise security programs; strong collaboration and communication.
SAST, DAST, SCA, API testing, Container security, Kubernetes security, CI/CD security, Cloud security, Software supply chain security, Security automation
Job PostingView all
3w
Save
Mark Applied
Hide
Application Security Manager
Chicago or New York City
HybridFull Time
Alter Domus
Alter Domus: Provides administrative and accounting services for alternative investment funds.
4+ YOE4+ years application security experience; experience with SAST/DAST/SCA, secure code review, CI/CD integrations, OWASP, cloud (AWS/Azure) and containerization; strong developer enablement and communication skills; bachelor’s preferred.
SAST, DAST, SCA, secrets scanning, Azure DevOps, GitHub Enterprise, GitHub Advanced Security, Azure Pipelines, GitHub Actions, Snyk, Cycode, Apiiro, Burp Suite, AWS, Azure, Docker, Kubernetes, Python, Java, C#
Job PostingView all
6d
Save
Mark Applied
Hide
Staff Application Security Engineer
New York or Miami or United States
$168k-$240k/yr HybridFull Time
Gemini
GeminiNasdaq: GEMI: Regulated platform for trading and storing digital assets.
7+ YOEExpertise in threat modeling, secure design/code review, penetration testing, application security controls, familiarity with regulated environments, strong communication, and experience building AI security tooling.
Scala, Java, Go, Python, SLSA, OWASP SPVS, CI/CD
Job PostingView all
2w
Save
Mark Applied
Hide
Senior Application Security Architect
Quincy or Princeton or Berwyn or Clifton or Austin
$120k-$203k/yr HybridFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
14+ YOEDesign and review secure architectures for applications, APIs, cloud-native and AI systems; conduct threat modeling and risk assessments; embed secure-by-design, DevSecOps, and AI security practices.
Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), Kubernetes, CI/CD, DevSecOps, Infrastructure as Code (IaC), SAST, DAST, IAST, software composition analysis (SCA), OWASP Top 10
Job PostingView all
2mo
Save
Mark Applied
Hide
Lead Application Security Engineer
New York, New York, United States
$190k-$250k/yr OnsiteFull Time
Apollo Global Management
Apollo Global ManagementNYSE: APO: Global alternative asset manager providing investment and retirement solutions.
10+ YOE10+ years in application security; strong software development background; experience with SCA/SAST/DAST, secure SDLC; familiarity with cloud, leading security standards; CISSP/CSSLP etc preferred.
SCA, SAST, DAST, Snyk, GitHub, Burp Suite
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff Application Security Engineer
San Francisco or New York City or Pittsburgh
$228k-$290k/yr HybridFull Time
Abridge
Abridge: Automates medical documentation through AI-powered speech analysis
10+ YOE10+ years in application security, expertise in threat modeling, secure code review, vulnerability management, incident response, programming (Python, NextJS), cloud security (GCP), Kubernetes, and AI/ML security; strong communication and leadership skills.
Python, NextJS, GCP, Kubernetes
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Los Angeles or New York or San Francisco
$165k-$190k/yr HybridFull Time
Tatari
Tatari: A platform for buying and measuring TV advertising campaigns.
Production Python experience, strong hands-on application security (SAST/DAST/SCA), threat modeling, CI/CD automation, container/AWS/Kubernetes security, API security, and LLM risk mitigation.
Python, Java, Rust, AWS, Kubernetes, CI/CD, SAST, DAST, SCA, OWASP Top 10, API Security Top 10, ASVS, SPVS, AISVS, LLM
Job PostingView all
1w
Save
Mark Applied
Hide
Sr. Application Security Manager
New York City, New York, United States
$153k-$260k/yr OnsiteFull Time
DoubleVerify
DoubleVerifyNew York Stock Exchange: DV: Provides software for measuring and authenticating digital media quality.
10+ YOE3+ Mgmt10+ years in information security with technical management experience; expertise in application, API, cloud, supply chain or AI/ML security; hands-on AppSec tooling and scripting for automation.
Ox Security, Snyk, Veracode, Checkmarx, Wiz, Cursor, Claude Code, VS Code, GitLab, GitHub, ArgoCD, Terraform, Python, PromptFlow, OWASP Application Security Verification Standard (ASVS), OWASP API Security Top 10, OWASP Top 10 for LLMs, NIST AI RMF
Job PostingView all
6d
Save
Mark Applied
Hide
Senior Application Security Engineer
New York, New York, United States
$220k-$235k/yr HybridFull Time
Savvy Wealth
Savvy Wealth: Digital wealth management platform for financial advisors.
5+ YOE5+ years hands-on security engineering with application/product security, strong coding skills, AppSec toolchain experience (secrets, SCA, SAST), cloud (AWS/GCP) and Cloudflare experience, OAuth/SaaS hardening, GitHub/CICD security, and strong communication.
AWS, GCP, Cloudflare, Google Workspace, GitHub, Rippling, Slack, Claude
Job PostingView all
1mo
Save
Mark Applied
Hide
Senior Application Security Engineer
United States or Canada or San Francisco or New York City or Seattle
$190k-$273k/yr RemoteFull Time
Apollo.io
Apollo.io: AI-powered platform for B2B sales intelligence and outreach automation.
5+ YOE5+ years software engineering or application security experience; strong coding skills (Ruby, Python), Linux and GCP familiarity, deep AppSec/vulnerability management, pen-testing and SAST experience, AI security, and strong communication.
Ruby, Python, Linux, GCP, SAST
Job PostingView all
10h
Save
Mark Applied
Hide
Senior Application Security Engineer
Independence or Cleveland or Kansas City or Phoenix or Tampa or Nashville or New Haven or Hartford
HybridFull Time
CBIZ
CBIZNYSE: CBZ: Provides financial, tax, and business advisory services to organizations.
8+ YOECollege degree, 8+ years related experience, expert technical knowledge in application and AI security, ability to lead teams, travel and on-call availability, strong verbal and written communication.
STRIDE, PASTA, MITRE ATLAS, OWASP Top 10, CWE Top 25, SANS 25, Semgrep, CodeQL, SonarQube, Checkmarx, Veracode, Burp Suite, OWASP ZAP, Snyk, Black Duck, GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Microsoft Azure, AWS, Kubernetes, CNAPP, REST, GraphQL, OAuth 2.0, OIDC, SAML, CVSS, NIST AI RMF, EU AI Act, ISO/IEC 42001, MITRE ATT&CK, SBOM, Python, Java, C#/.NET, JavaScript/TypeScript, Go
Job PostingView all
2mo
Save
Mark Applied
Hide
Application Security Engineer, Vice President
Jersey City, New Jersey, United States
$140k-$203k/yr HybridFull Time
Mitsubishi UFJ Financial Group
Mitsubishi UFJ Financial GroupNew York Stock Exchange: MUFG: Global financial group providing diverse banking and investment services.
5+ YOE5+ years in application security, DAST/SAST/SCA, secure coding in Java/Python, CI/CD automation, compliance with NIST/PCI-DSS/SOX; AI/ML security experience preferred.
Invicti, Veracode, Burp Suite, AppScan, Fortify, Netsparker, Acunetix, Python, Java, Bash, PowerShell
Job PostingView all
1mo
Save
Mark Applied
Hide
Application Security Engineer, AWS Security
New York, New York, United States
$153k-$208k/yr OnsiteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
2+ YOE2+ years IT security experience or bachelor's in computer science; knowledge of system vulnerabilities, penetration testing, web protocols, secure coding, identity management, and strong communication and troubleshooting skills.
AWS, C++, HTTP, IPsec, Java, Perl, Python, REST, SOAP, TCP/IP, UDP, WSDL, XSD
Job PostingView all
4d
Save
Mark Applied
Hide
Application Security Engineer / Architect (DevSecOps)
New York City, New York, United States
$175k-$210k/yr HybridFull Time
Clear Street
Clear Street: Cloud-native capital markets platform for institutional trading and clearing.
7+ YOE7+ years in DevSecOps/application or cloud security, hands-on CI/CD and cloud experience, SAST/DAST/SCA tool use, container/Kubernetes security, scripting and IaC familiarity, strong communication.
GitHub Actions, GitLab CI, Jenkins, AWS, Azure, GCP, Semgrep, Snyk, Checkmarx, Veracode, Kubernetes, Python, Bash, Terraform, CloudFormation, Pulumi, OPA/Rego, Checkov, OWASP Top 10, CWE
Job PostingView all
4w
Save
Mark Applied
Hide
Application Security Engineer
Research Triangle Park or San Jose or New York City or New York or Washington or Canada
$167k-$211k/yr HybridFull Time
Cisco
CiscoNASDAQ: CSCO: Develops and sells networking hardware and cybersecurity software.
1+ YOEAdvanced AI research experience applied to networking/security or related computer science areas; ability to design and run experiments, build and evaluate models, and communicate research to cross-functional teams.
Job PostingView all
2mo
Save
Mark Applied
Hide
Security engineer, application security
San Francisco or New York City
$119k-$210k/yr HybridFull Time
Writer
Writer: Platform for building and deploying enterprise generative AI agents.
4+ YOE4+ years in application security; strong coding in Python/Java/Go/JavaScript/TypeScript; SAST/DAST in CI/CD; threat modeling; secure SDLC; security reviews; automation.
Python, Java, Go, JavaScript, TypeScript, SAST, DAST, CI/CD, DevSecOps
Job PostingView all
3mo
Save
Mark Applied
Hide
Security Engineer, Application Security
San Francisco or New York City or London
$130k-$500k/yr OnsiteFull Time
Mercor
Mercor: Connecting expert human intelligence with frontier AI model development.
5+ YOEFive+ years of professional experience in application security or security engineering; strong web security knowledge; proficient in at least one of Python, TypeScript, or Go; experience with SAST/DAST tooling and vulnerability management.
Python, TypeScript, Go, Semgrep, CodeQL, Snyk, Burp
Job PostingView all
3mo
Save
Mark Applied
Hide
Senior Security Engineer - Application Security
New York, New York, United States
$150k-$185k/yr HybridFull Time
K Health
K Health: Provides AI-powered virtual primary care and clinical diagnostic tools.
5+ YOE5+ years in information, cloud, IT, or application security with experience building security programs and policies.
Datadog, Sumologic, Torq, flare.io, Google Cloud Platform, Entitle, Okta, Orca Security, FlowSec, Prisma
Job PostingView all
2w
Save
Mark Applied
Hide
Staff+ Application Security Engineer - M&A
San Francisco or Seattle or New York City
$320k-$485k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Hands-on application and infrastructure security experience, production-quality coding in Python/Go/Rust/TypeScript, threat-modeling, vulnerability ID, clear communication, and ability to assess unfamiliar codebases under time pressure.
Python, Go, Rust, TypeScript, Claude, SAST, DAST, LLMs, bug bounty
Job PostingView all
3mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Boston or New York
$234k-$300k/yr HybridFull Time
Datadog
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
Job PostingView all

Explore Jobs

Expand Your Job Search