728 sast jobs at 500 companies in United States

1mo
Save
Mark Applied
Hide
Security Testing Specialist - SAST
Pittsburgh or Cleveland or Strongsville or Denver or Phoenix or Birmingham or Dallas
$91k-$186k/yr OnsiteFull Time
PNC Financial Services
PNC Financial ServicesNYSE: PNC: Provides banking, lending, and investment services to customers.
5+ YOEBachelors and 5+ years' experience preferred. Expertise in SAST and application security, manual code review, Java/.NET/Python, CI/CD orchestration, vulnerability triage and remediation.
Java, .NET, Python, Static Application Security Testing (SAST), CI/CD
2w
Save
Mark Applied
Hide
App Sec SAST Engineer
New York City or Princeton
$60k-$135k/yr OnsiteContract
Wipro
WiproNYSE: WIT: Global technology services and consulting for digital transformation.
5+ YOE5+ years experience in application security, secure code review for Java/.Net, familiarity with vulnerability assessment, OWASP/NIST frameworks, Fortify/Veracode, and strong communication skills.
Fortify, Veracode, Java, .Net, Python, OWASP Top 10, NIST, OSSTMM, OSINT, SAC
3mo
Save
Mark Applied
Hide
Application Security Engineer
United States
RemoteFull Time
H.W. Kaufman Group
H.W. Kaufman Group: Global network of specialty insurance brokerage and underwriting companies.
5+ YOE5+ years in application security with SDLC integration, threat modeling, SAST/DAST, and regulatory alignment.
SAST, DAST, SCA, Burp Suite, Fortify, Veracode, Docker, Kubernetes
1mo
Save
Mark Applied
Hide
Senior Engineer, Application Security
Jacksonville, Florida, United States
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage platforms.
Senior engineer with experience in application security, SAST/DAST, CI/CD integration, and cloud environments.
SAST, DAST, Software Composition, WAF
1mo
Save
Mark Applied
Hide
Senior Engineer, Application Security
Jacksonville or Provo
OnsiteFull Time
Intercontinental Exchange
Intercontinental ExchangeNYSE: ICE: Operates global financial exchanges, clearing houses, and mortgage technology.
Experience in application security, SAST/DAST, secure SDLC, CI/CD, cloud, and penetration testing.
SAST, DAST, Software Composition Analysis, Web Application Firewall, CI/CD
2mo
Save
Mark Applied
Hide
Salesforce Technical Architect - DevSecOps/AutoRABIT
United States or North America
RemoteFull Time
phia
phia: Provides cybersecurity intelligence and defensive services to federal agencies.
5+ YOE5+ years in Salesforce DevSecOps; Salesforce DX; CI/CD; SAST; CSPM; strong integration skills.
Salesforce DX, ARM (Automated Release Management), AutoRABIT CodeScan, AutoRABIT Guard, Git, Jira, SAST, CSPM
2mo
Save
Mark Applied
Hide
Sr Security Engineer
Temple, Texas, United States
HybridFull Time
McLane
McLaneNYSE: BRK.B: Wholesale distribution and supply chain services for retailers.
6+ YOESenior cybersecurity engineer with 6–10 years in security engineering, DevSecOps, cloud security, SAST/DAST, and threat modelling.
Snyk, Sonatype, Black Duck, Jenkins, GitHub Actions, Azure DevOps, AWS, Azure, GCP, Terraform, Kubernetes, SAST, DAST
1mo
Save
Mark Applied
Hide
Lead Security Engineer
Suitland, Maryland, United States
OnsiteFull Time, Contract
B&A
B&A: Provides IT systems integration and data services to federal agencies.
15+ YOELead security engineer with 15+ years, DevSecOps, Zero Trust, SAST/DAST, ATO, CISSP, CCSP; US Citizenship required.
SIEM, SBOM, NIST SP 800-53, NIST Cybersecurity Framework, Zero Trust, SAST, DAST, DevSecOps, POA&M, ATO, Encryption, IAM, API security
3mo
Save
Mark Applied
Hide
Security Engineer - Application Security
Pittsburgh, Pennsylvania, United States
RemoteFull Time
Fragomen
Fragomen: Provides global immigration legal services and mobility solutions.
5+ YOE5+ years web app development; secure SDLC, DAST/SAST experience; strong communication; knowledge of secure coding and threat modeling.
DotNet, Python, Java, DAST, SAST, CSSLP, CASE
1mo
Save
Mark Applied
Hide
Application And Web Security Specialist
Little Rock, Arkansas, United States
OnsiteFull Time
Dillard's
Dillard'sNYSE: DDS: National department store chain retailing apparel, cosmetics, and home goods.
Experience with web and application security, DAST/SAST, web application firewalls, vulnerability verification, SDLC security controls, plus strong communication and ethical behavior.
Apache, WebSphere, CDN, OCP/Docker, Docker, Next.JS, React, DAST, SAST, web application firewall, LLMs, OWASP
3mo
Save
Mark Applied
Hide
DevOps Engineer
Ogden, Utah, United States
OnsiteFull Time
TAB Bank
TAB Bank: Offers commercial lending and digital banking solutions for businesses.
3+ YOE3+ years in application security, DevSecOps, or related roles; hands-on with SAST/DAST/SCA and container/code scanning; experience with Terraform and AWS; strong communication and integrity.
SAST, DAST, SCA, container security, Terraform, AWS
1mo
Save
Mark Applied
Hide
Application Security Engineer
Phoenix, Arizona, United States
OnsiteFull Time
SmartRent
SmartRentNYSE: SMRT: Provides smart home and building automation for rental housing.
4+ YOE4–6 years in application security; secure SDLC; cloud and web security; strong communication; experience with OWASP, SAST/DAST/SCA; AWS and WAF knowledge.
SAST, DAST, SCA, GHAS, Burp Suite, Fortra, OWASP, JWT, OAuth, AWS, WAF, CloudFlare
4w
Save
Mark Applied
Hide
Cyber Security Analyst III - App Security & Vulnerability (Remote)
Raleigh or North Carolina or Arizona or Texas
RemoteFull Time
First Citizens Bank
First Citizens BankNasdaq: FCNCA: Provides full-service consumer, commercial, and wealth management banking.
6+ YOEHands-on experience with SAST/DAST/SCA and web application security, proficiency in scripting languages, vulnerability triage and remediation, and experience integrating security into SDLC/CI-CD.
SAST, DAST, SCA, Checkmarx, Veracode, Fortify, Snyk, Burp Suite, OWASP ZAP, Jenkins, GitHub Actions, Azure DevOps, AWS, Azure, GCP, Postman, SoapUI, Python, Java, JavaScript, Bash
3mo
Save
Mark Applied
Hide
Application Security Engineer
Lindon, Utah, United States
OnsiteFull Time
Awardco
Awardco: Software platform for employee recognition and corporate rewards programs.
6+ YOE6+ years in application security or secure software engineering; cloud SaaS security; web/API security; experience with SAST/DAST and CI/CD; mentoring developers.
SAST, DAST, Dependency scanning, Container scanning, GitHub Advanced Security, Snyk, Wiz
4d
Save
Mark Applied
Hide
Lead Application Security Eng
Alpharetta, Georgia, United States
$125k-$175k/yr OnsiteFull Time
Morgan Stanley
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
10+ YOE10+ years IT experience with 7+ years in application security, expertise in SAST/SCA/DAST, CI/CD integration, security reviews, metrics reporting, and stakeholder communication.
SAST, SCA/OSS, DAST, Python, PostgreSQL, MongoDB, Kafka
2d
Save
Mark Applied
Hide
AppSec Sales Engineer - East
Raleigh or Atlanta
RemoteFull Time
Harness
Harness: AI-powered platform for automating software delivery and DevOps.
Experienced pre-sales engineer with AppSec knowledge (SAST/DAST/SCA), demo and workshop delivery, ability to translate security needs to engineering, and willingness to travel occasionally.
SCA, SAST, DAST, Harness AI, Software Delivery Knowledge Graph
2d
Save
Mark Applied
Hide
Sr. Application Security Engineer
United States
$130k-$190k/yr RemoteFull Time
Mitek Systems
Mitek SystemsNASDAQ: MITK: Provider of AI-powered identity verification and mobile deposit solutions.
5+ YOE5+ years in application security with hands-on SAST/DAST/SCA, application penetration testing, secure code review, threat modeling, API security, and developer enablement.
SAST, DAST, SCA, OWASP Top 10, OAuth 2.0, mTLS, STRIDE, PASTA
2w
Save
Mark Applied
Hide
React and Node.js FSD Engineer
Dallas, Texas, United States
$100k-$120k/yr OnsiteFull Time
Tata Consultancy Services
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOE8+ years experience building React and Node.js applications; backend with FastAPI, .NET, or Node.js; PostgreSQL and ORM experience; familiarity with security (DAST/SAST/SCA) and Azure DevOps.
React, React.Net, Vite, Tailwind, FastAPI, .NET, Node.js, DAST, SAST, SCA, PostgreSQL, SQLAlchemy, EF Core, Playwright, Azure DevOps, Azure App Services, Veracode, OWASP, Key Vault, GitHub Copilot, Agent workflows, Node.js, Visual Studio Code, Git, SSMS, MSSQL
3mo
Save
Mark Applied
Hide
Staff Application Security Engineer
Boston or New York
$234k-$300k/yr HybridFull Time
Datadog
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Software engineering background with hands-on code review; knowledge of OWASP Top 10, SAST/DAST, API security; able to mentor engineers and define secure-by-default solutions.
Go, Python, Rust, OWASP, SAST, DAST, API security, APM, CI/CD
4d
Save
Mark Applied
Hide
Lead Application Security Eng
Alpharetta, Georgia, United States
$125k-$175k/yr OnsiteFull Time
Morgan Stanley
Morgan StanleyNYSE: MS: Provides global investment banking, wealth management, and advisory services.
10+ YOE10+ years IT experience with 7+ years in application security; expertise in SDLC, SAST/SCA/DAST, container scanning, CI/CD integration, security reviews, and stakeholder communication.
SAST, SCA/OSS, DAST, CI/CD, Python, PostgreSQL, MongoDB, Kafka, TCP/IP, HTTP, SSL/TLS