Application Security Engineer (Mid-Level)

About the role

AgileEngine is seeking a mid‑level Application Security Engineer to strengthen the security posture of a large‑scale financial services program. You will work hands‑on with DevSecOps practices, integrating security testing into CI/CD pipelines and guiding development teams on secure coding.

Key responsibilities

• Write and maintain Python scripts that embed SAST, DAST, and SCA gates into CI/CD pipelines.
• Continuously tune and configure security scanning tools to reduce false positives and improve alert quality.
• Assist in deploying automated hardened baselines and secure coding patterns.
• Provide actionable, code‑level remediation guidance to Java and Python development teams.

Required profile

• 3–5 years of commercial experience combining software engineering and Application Security/DevSecOps.
• Strong Python scripting skills for automation.
• Ability to read and navigate Java source code.
• Experience with modern CI/CD orchestration tools.
• Familiarity with vulnerability scoring frameworks (e.g., CVSS).
• Self‑starter who can work with minimal supervision.
• Upper‑intermediate proficiency in English.

Required skills

• Python
• Java (code comprehension)
• CI/CD orchestration tools (e.g., Jenkins, GitLab CI, GitHub Actions)
• SAST, DAST, and SCA tools
• Vulnerability scoring frameworks

What we offer

• Professional growth through mentorship, TechTalks, and personalized development roadmaps.
• Competitive USD‑based compensation with education, fitness, and team activity budgets.
• Opportunity to work on modern solutions for Fortune 500 and leading product companies.
• Flexible schedule with remote and office options (hybrid work model).