Application Security Engineer – Contractor

Job Description: - Assist initiatives and projects to support and enhance security in application development processes.

• Evaluate and optimize security tooling and explore technologies that enhance security posture and scalability.
• Conduct internal penetration testing and code reviews.
• Create, update, and maintain threat models for software projects.
• Leverage AI to automate workflows and build efficiencies.
• Advise software developers on secure coding practices and vulnerability remediation.
• Analyze source code and support remediation of potential vulnerabilities.
• Draft communications on security project and program status for stakeholders and leadership.
• Support development of security training materials and provide guidance to internal software development teams.
• Support incident response.

Requirements: - 3-5 years of scripting and development experience, preferably supporting web applications.

• 2-3 years of cloud engineering experience, preferably using Infrastructure as Code, with emphasis in AWS.
• Familiarity with Claude AI and other AI tools and leveraging agentic AI for automation.
• NIST and HIPAA experience a plus.
• Demonstrated excellent judgment in assessing and prioritizing technical risk.
• Knowledge of security best practices and standards, such as OWASP and OWASP ASVS, S-SDLC, and BSIMM.
• Excellent communication skills with the ability to articulate complex security issues to technical and non-technical collaborators, with an inclusive mindset.
• Ability to identify and remove bottlenecks for teammates in process and technology.
• Familiarity with a wide variety of security tools, technologies, and methodologies.