Job Details

Overview

Title: Principal Application Security Engineer

Location: Flexible / Remote

Employment Type: Full-Time

Compensation: $145,000 – $235,000

Role Summary

We are seeking a Principal Application Security Engineer to lead enterprise application security programs and embed security into the development lifecycle. You will oversee secure coding initiatives, conduct code reviews, manage vulnerability scanning programs, and provide training for engineering teams. This role requires deep technical expertise in application security paired with strong leadership to influence development practices at scale.

Key Responsibilities

• Lead the implementation of a secure software development lifecycle (SDLC).
• Conduct in-depth secure code reviews and threat modeling.
• Manage and optimize SAST/DAST and vulnerability scanning programs.
• Implement application security best practices and OWASP standards.
• Provide training and mentorship to developers on secure coding.
• Partner with engineering leaders to integrate security into DevOps workflows.

Requirements

• 8+ years of experience in application security, software security, or related roles.
• Strong expertise in secure code review and vulnerability management.
• Hands-on experience with Burp Suite, OWASP tools, and static/dynamic analysis.
• Deep understanding of SAST/DAST, threat modeling, and secure development practices.
• Proven ability to design and scale security programs across multiple products.
• Excellent communication and leadership skills to influence cross-functional teams.

About the Opportunity

This is a senior leadership role for someone who thrives on building secure-by-design engineering practices. You'll shape enterprise application security programs, reduce risk, and mentor development teams to embed security into every stage of the lifecycle.

Why Join

• High-impact role protecting mission-critical applications.
• Competitive compensation with leadership visibility.
• Opportunity to define and drive enterprise application security strategy.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Engineering and Information Technology

Industries

• Software Development
• IT System Custom Software Development
• IT Services and IT Consulting