Mid‑Level Application Security Engineer

About the role

AgileEngine is seeking a Mid‑Level Application Security Engineer to join its large‑scale financial services security program. You will work hands‑on with DevSecOps practices, integrating security controls into CI/CD pipelines and helping development teams ship secure code.

Key responsibilities

• Write and maintain Python scripts that embed SAST, DAST, and SCA gates into CI/CD pipelines.
• Continuously tune and configure security scanning tools to reduce false positives and improve alert quality.
• Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Collaborate directly with Java and Python development teams to provide actionable, code‑level remediation guidance.

Required profile

• 3–5 years of commercial experience combining software engineering and application security (DevSecOps/AppSec).
• Strong Python programming skills for automation and scripting.
• Ability to read and navigate Java source code.
• Experience with modern CI/CD orchestration tools.
• Familiarity with vulnerability scoring frameworks (e.g., CVSS).
• Upper‑intermediate English proficiency and ability to work with minimal supervision.

Required skills

• Python
• Java
• CI/CD orchestration tools (e.g., Jenkins, GitLab CI, GitHub Actions)
• SAST, DAST, and SCA security testing
• Vulnerability scoring frameworks

What we offer

• Mentorship, TechTalks, and personalized growth roadmaps.
• Competitive USD‑based compensation with education, fitness, and team activity budgets.
• Opportunities to work on modern solutions for Fortune 500 and top product companies.
• Flexible schedule with remote and office options (hybrid work mode).