remote
Staff Application Security Engineer - Epsilon
Security Engineer
Lead secure software delivery by designing secure architectures, implementing OWASP‑compliant coding practices, and driving advanced security testing across the development lifecycle with SAST/DAST tools.
About the role
Key Responsibilities
- Architect and enforce secure coding standards across multiple development teams.
- Lead advanced security testing using SAST, DAST, and dynamic analysis platforms.
- Identify, remediate, and track web application vulnerabilities in line with OWASP guidelines.
- Collaborate with product and engineering leaders to embed security into the CI/CD pipeline.
- Mentor and train developers on secure design patterns and threat modeling.
Requirements
- 5+ years of experience in application security, with deep knowledge of secure software architecture.
- Proficiency in OWASP Top 10, threat modeling, and secure coding practices.
- Hands‑on experience with SAST/DAST tools (e.g., Veracode, Checkmarx, Burp Suite).
- Strong understanding of DevSecOps principles and CI/CD security integration.
- Excellent communication skills and ability to influence cross‑functional teams.