Application Security Engineer - Chandler, AZ

Job Description

A rapidly growing technology-centric company in Chandler, AZ is seeking an Application Security (App Sec) Engineer to add deep expertise to its security engineering function. As an Application Security Engineer, you will play a vital role in embedding security best practices within the full software development lifecycle, protecting critical business applications from evolving threats and vulnerabilities.

In this position, you'll be engaged in reviewing design patterns, conducting code reviews for potential vulnerabilities, and providing actionable recommendations to developers for secure coding. Your responsibilities will span managing static and dynamic analysis tools, collaborating with product and engineering teams to define application security requirements, validating remediation efforts, and implementing secure deployment pipelines. You will also work to automate repetitive security tasks, deliver security-focused training, and ensure compliance with regulatory and corporate security standards.

Required Skills & Experience - In-depth knowledge of application security fundamentals and familiarity with modern threat landscapes

• Hands-on experience with code analysis (SAST/DAST), vulnerability scanning solutions, and penetration testing techniques
• Skilled in secure coding practices for multiple languages (such as Java, Python, C#, or JavaScript)
• Experience designing and automating CI/CD pipelines with integrated security controls
• Capable of working with teams to triage, remediate, and document vulnerabilities
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience

Desired Skills & Experience - Knowledge of cloud-native application security with AWS, Azure, or Google Cloud Platform

• Familiarity with OWASP Top Ten, SANS CWE, and compliance frameworks (SOC 2, PCI, HIPAA, etc.)
• Experience conducting threat modeling sessions and architecture risk reviews
• Hold security certifications (e.g., CSSLP, CEH, OSCP, or similar)

Core Responsibilities

Daily Responsibilities

100% Hands On - Analyze application code to detect security issues and collaborate on fixing vulnerabilities

• Define and refine security policies, standards, and procedures for the development process
• Implement and monitor automated security checks in CI/CD environments
• Conduct hands-on penetration testing and red team exercises
• Deliver training and awareness sessions for developers on best security practices
• Maintain records of assessments, reporting, and remediation tracking

The Offer

Eligible for bonus or commission

Comprehensive benefits offered: - Medical Insurance

• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k) with company match (where applicable)

Applicants must be authorized to work in the United States on a full-time, ongoing basis