23 appsec jobs at 17 companies in Pennsylvania

1mo
Save
Mark Applied
Hide
Software Supply Chain Security Specialist
Malvern or Charlotte or Dallas or Fort Worth
HybridFull Time
Vanguard
Vanguard: Provides mutual funds, ETFs, and investment management services.
5+ YOE5+ years related experience; 7+ years in AppSec/DevSecOps/platform security preferred. Hands-on SCA and pipeline security, programming in Python/Java/YAML, and relevant security certifications preferred.
SBOM, CI/CD, SCA, container scanning, Python, Java, YAML
2mo
Save
Mark Applied
Hide
AI Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)
Virginia or Maryland or Pennsylvania or North Carolina or Delaware or New Jersey or District of Columbia or United States
RemoteFull Time
GuidePoint Security
GuidePoint Security: Provides cybersecurity consulting, managed services, and integrated technology solutions.
5+ YOE5+ years in security engineering (cloud/AppSec focus), hands-on experience with agentic AI and AI/ML security, familiarity with cloud AI services, Python proficiency, threat modeling and strong communication skills.
OWASP LLM Top 10, MITRE ATLAS, OpenAI, Azure OpenAI, AWS Bedrock, AWS SageMaker, Azure AI Foundry, Google Vertex, Python, Claude Code, Open Code, Cursor, Codex, Cedar, Rego, AWS CloudFormation, Terraform, OpenTofu, Greenhouse Software, Zoom Scheduler
1w
Save
Mark Applied
Hide
Cyber Red Team Operator
Boston or Philadelphia or Jersey City
$110k-$160k/yr OnsiteFull Time
Brown Brothers Harriman
Brown Brothers Harriman: Providing global investment management, custody, and private banking services.
8+ YOERequires 8–10 years in information security, enterprise red team or penetration testing expertise, cloud and infrastructure testing, scripting, vulnerability assessment, communication skills, and a bachelor's degree or equivalent experience.
MITRE ATT&CK, Python, PowerShell, Bash, Windows, Linux, Active Directory, Microsoft Azure, OWASP, CVE, Core Impact, AttackForge
6d
Save
Mark Applied
Hide
Senior Security Analyst - Fuze Health
California or Texas or Colorado or Washington or Nevada or Arizona or Alabama or Arkansas or Connecticut or Florida or Georgia or Hawaii or Idaho or Illinois or Indiana or Iowa or Kansas or Kentucky or Maryland or Massachusetts or Michigan or Minnesota or Missouri or New Hampshire or New Jersey or New Mexico or New York or North Carolina or Ohio or Oklahoma or Oregon or Pennsylvania or Rhode Island or South Carolina or Tennessee or Vermont or Virginia or Wisconsin
$129k-$161k/yr RemoteFull Time
Fuze Health
Fuze Health: Technology-powered provider of digital pharmacy and home health services.
4+ YOEFour years of cybersecurity experience; Linux, Windows, Python, cloud, application and infrastructure security, agile development, secure coding, and industry standards knowledge required. U.S. work authorization required.
Linux, Windows, Python, AWS, SAST, Web Application Firewall (WAF), CIS, OWASP, HITRUST, ISO
1mo
Save
Mark Applied
Hide
Senior Software Engineer
New York City or Bethlehem or Holmdel
$95k-$156k/yr HybridFull Time
Guardian Life
Guardian Life: Provides life, disability, dental, and vision insurance products.
4+ YOE4+ years building public-facing web applications; advanced JavaScript/TypeScript and modern frameworks; API and microservices experience; strong problem-solving and security awareness.
JavaScript, TypeScript, Node, React, Next, NestJS, Jest, REST, GraphQL, Redis, HTML, CSS, AWS, CI/CD, OWASP
1mo
Save
Mark Applied
Hide
Container Security Engineer
Malvern or Charlotte or Plano or Dallas
HybridFull Time
Vanguard
Vanguard: Global investment management and financial services provider.
Undergraduate degree or equivalent experience; hands-on AWS container security experience; Wiz, CI/CD, cloud-native architecture, container lifecycle, runtime security, and security framework knowledge.
Amazon Web Services (AWS), ECS, EKS, Wiz, Azure, AKS, GCP, GKE, CI/CD, SAST, SCA, IAST, DAST, NIST, OWASP, MITRE, AI/ML
1w
Save
Mark Applied
Hide
Vice President, Information Security
New York City or Pittsburgh or Lake Mary
$83k-$209k/yr OnsiteFull Time
BNY
BNYNYSE: BK: Global institution managing and servicing financial assets worldwide.
6+ YOERequires 6–10 years in cloud or security engineering, AWS, Azure, or GCP experience, security automation, CSPM, Terraform, cloud-native controls, and a bachelor's degree or equivalent experience.
AWS, Azure, GCP, Wiz, Azure Policy, Microsoft Defender for Cloud, Terraform, KQL, Splunk, Bash, PowerShell, gcloud, Log Analytics, Microsoft Sentinel, GitLab, Kubernetes, Infrastructure as Code, Cloud Security Posture Management (CSPM), NIST CSF, NIST SP 800-53, CIS Benchmarks, CSA CCM, OWASP
3mo
Save
Mark Applied
Hide
Application Security Engineer
Harrisburg, Pennsylvania, United States
OnsiteFull Time
D&H Distributing
D&H Distributing: Distributes technology products and IT solutions to resellers.
3+ YOEDesigns and implements secure software practices; assesses application security; supports SDLC; proficient in at least one programming language; familiar with OWASP Top 10; experience with security assessments and vendor security.
OWASP, OAUTH, ADFS, PowerShell, Python, Perl, Java, .NET, C#, SIEM, Security
2mo
Save
Mark Applied
Hide
Staff Engineer
Calgary or Phoenix or Scottsdale or Pittsburgh or Columbus or Orlando or St. Louis or Edmonton or Halifax or Moncton or Ottawa or Toronto or Winnipeg or Vancouver
$200k-$240k/yr RemoteFull Time
ZayZoon
ZayZoon: Provides employees with instant access to their earned wages.
6+ YOE6+ years with Ruby on Rails, strong OO and DDD fundamentals, experience with scale/concurrency/queuing/background processing, AWS/RDS/serverless experience, SQL/ETL/data-warehouse skills, security mindset (OWASP, SOC-2), and experience applying AI to workflows.
Ruby on Rails, AWS, RDS, SQL, OWASP, SOC-2, Domain-driven design (DDD), microservices, serverless, ETL, AI
3d
Save
Mark Applied
Hide
Tech Lead/ Principal Software Engineer
Plymouth Meeting, Pennsylvania, United States
$182k-$200k/yr OnsiteFull Time
Towne Park
Towne Park: Valet parking and hospitality services for hospitals and hotels.
8+ YOE2+ MgmtBachelor's degree in a technical field, 8+ years developing enterprise software, and 2+ years leading engineering teams. Requires Azure, .NET/C#, Angular or React, SQL Server, NoSQL, REST APIs, Agile, and secure development experience.
Microsoft Azure, .NET, C#, Angular, React, SQL Server, REST APIs, Claude Code, GitHub Copilot, Cursor, OWASP, Python, Next.js, LLM, MCP
1mo
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
2w
Save
Mark Applied
Hide
Senior .Net Developer: (Onsite)
Agoura Hills or Florida or Georgia or Illinois or Indiana or Minnesota or Montana or North Carolina or New Hampshire or New Jersey or New York or Ohio or Oregon or Pennsylvania or Virginia or United States
$130k-$160k/yr OnsiteFull Time
Vitu
Vitu: Digitizes vehicle titling and registration for businesses and governments.
5+ YOERequires 5+ years of software development experience, distributed systems, .NET Core, C#, ASP.NET Core, REST/SOAP APIs, Git, PostgreSQL, cloud/Kubernetes, security, testing, and technical documentation.
.NET Core, C#, ASP.NET Core, Git, PostgreSQL, Kubernetes, GCP, SharePoint, REST, SOAP, CI/CD, OWASP, HSA, FSA
1mo
Save
Mark Applied
Hide
Digital Identity Non-Human Identity, Machine Identity & Agentic Identity Associate Director
Chicago or Atlanta or Orlando or Austin or Miami or Philadelphia or Tampa or Houston or Dallas or Charlotte
$155k-$264k/yr HybridFull Time
Protiviti
ProtivitiNew York Stock Exchange: RHI: Global consulting firm providing risk, advisory, and technology services.
9+ YOE9+ years in IAM/PAM/machine or non-human identity with consulting or enterprise program experience; bachelor\u0002s degree; executive advisory, business development, and team leadership skills; relevant professional certifications preferred.
Microsoft Entra ID, Azure Managed Identities, AWS IAM, Google Cloud IAM, Kubernetes, CI/CD, Infrastructure-as-Code, OAuth, OpenID Connect, SAML, SCIM, JWTs, CyberArk, SailPoint, Saviynt, Veza, Delinea, Okta, Ping Identity, Venafi, HashiCorp Vault, BeyondTrust, Akeyless, Oasis Security, Token, Clutch, OWASP, DevSecOps
1mo
Save
Mark Applied
Hide
Senior Information Security Analyst - Cloud and AI Security
Tredyffrin, Pennsylvania, United States
HybridFull Time
Universal Health Services
Universal Health ServicesNYSE: UHS: Operates acute care hospitals and behavioral health facilities.
5+ YOE5+ years cybersecurity experience, knowledge of cloud (AWS/Azure/Google Cloud), IAM, threat modeling (DREAD/STRIDE), security frameworks (OWASP, MITRE, NIST, HITRUST), regulatory requirements (SOX, HIPAA, HITECH), and strong analytical and communication skills.
AWS, Azure, Google Cloud, OWASP, MITRE, DREAD, STRIDE, HITRUST, NIST, CSC20
1mo
Save
Mark Applied
Hide
Application Security Engineer
Pittsburgh, Pennsylvania, United States
$110k-$120k/yr OnsiteFull Time
The Wolfe Companies
The Wolfe Companies: Provides comprehensive gift card management and fintech gifting solutions.
2+ YOE2+ years in application security/DevSecOps or software development with security exposure; coding background; CI/CD and secure-coding knowledge; bachelor\u0002s degree in related field (or equivalent experience).
Snyk, SemGrep, Cycode, GitHub, GitLab, Jenkins, AWS DevOps, OWASP, SANS CWE Top 25, DSOMM, BSIMM, AI/ML, LLM
1mo
Save
Mark Applied
Hide
Senior Product Security Engineer
United States or Pennsylvania
RemoteFull Time
Vertex
VertexNASDAQ: VERX: Automates global indirect tax calculation and compliance for enterprises.
5+ YOE5+ years in security with cloud and product security experience, AI-specific threat modeling, secure code reviews, SAST/DAST, and governance for AI-enabled features and model workflows.
OWASP, CIS Benchmarks, Cloud Security Alliance (CSA), SAST, DAST
2mo
Save
Mark Applied
Hide
Information Security – Risk & Compliance Analyst
Easton or United States or Europe or Asia
HybridFull Time
Victaulic
Victaulic: Manufacturer of mechanical pipe joining and flow control systems.
0+ YOE0–2 years in information security, IT audit, or risk; familiarity with NIST CSF, ISO/IEC 27001, CMMC, and NIS2; experience with risk assessments, third-party audits, cloud/DevOps/application security; CompTIA Security+ or equivalent; CISA preferred.
NIST CSF, ISO/IEC 27001, CMMC, NIS2 Directive, cloud computing, DevOps, application security, GRC platform
3mo
Save
Mark Applied
Hide
Software Engineer
Pittsburgh, Pennsylvania, United States
HybridFull Time
Aires
Aires: Provides corporate relocation and global mobility management services.
5+ YOE5+ years software engineering, Java/Spring Boot, AWS, SQL/PL-SQL, Git, Agile, testing and security
Java, Spring Boot, AWS, Lambda, S3, DynamoDB, EC2, SQL, PL/SQL, Git, JUnit, CI/CD, Jira, Confluence, OWASP, Spring Security, OAuth 2.0, JWT, ELK Stack, CloudWatch, Prometheus, Grafana, Docker, ECS, Kiro IDE, GenAI