Note: The job is a remote job and is open to candidates in USA. World Wide Technology is an information technology company hiring a Senior Application Security Engineer. The role requires independently owning application security domains, operating security scanning tools, integrating security controls into CI/CD pipelines, securing cloud-native applications, reviewing code, performing threat modeling, and communicating security risks and remediation to technical and non-technical stakeholders.
Skills
- Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field — or equivalent hands-on experience
- Minimum 8 years of experience in roles related to application security, information security, software engineering, SecDevOps
- A demonstrable track record of independently owning AppSec domains and delivering remediation without close supervision
- Hands-on experience operating application security scanning tooling (SAST, SCA, secrets, IaC) and integrating it into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or equivalent)
- Experience securing cloud-native and container/Kubernetes-based applications (AWS, Azure, GCP; Docker, Kubernetes, OpenShift)
- Ability to read and reason about code in one or more modern stacks (Java, JavaScript/TypeScript, Python, Go, or C#) well enough to perform and review secure code, trace data flows, and identify vulnerabilities in source code
- Scripting and automation in Python, Bash, or PowerShell
- Design-level understanding of authentication, authorization, and identity — session management, SSO and federation, and OAuth2/OIDC as architectural patterns
- Working knowledge of applied cryptography — TLS, certificates and PKI, secrets and key management, hashing versus encryption
- Strong command of HTTP and web API internals — request/response semantics, auth flows (OAuth2/OIDC, JWT, session management), and the authZ failures, injection, and business-logic flaws common to REST and GraphQL APIs
- Solid understanding of the secure software development lifecycle and where security testing, gates, and controls fit within it
- Strong working knowledge of OWASP ASVS, OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK, and CWE
- Working knowledge of NIST SSDF (SP 800-218), NIST 800-53, NIST 800-171, ISO 27001, SOC 2, and CMMC as they apply to secure software development
- Hands-on threat modeling experience (STRIDE, PASTA, or equivalent)
- Excellent interpersonal, written, and verbal communication — able to explain and document security risk and remediation credibly to both engineers and non-technical stakeholders
- Self-starter, team player, and enthusiasm for learning
- Applicants must be authorized to work in the United States without sponsorship. We are unable to provide sponsorship now or in the future for this position
- Direct, hands-on experience with one or more leading application security platforms (e.g., Wiz, Snyk, Apiiro, OX Security, Cycode, Checkmarx, Veracode, or GitHub Advanced Security)
- Hands-on experience securing AI/LLM-enabled and agentic applications; familiarity with OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic AI, MITRE ATLAS, NIST AI RMF, and Model Context Protocol (MCP) security implications
- Hands-on penetration testing or offensive security experience across web, API, infrastructure, or AI systems (including prompt injection, jailbreaks, and agent abuse)
- Industry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSCP, OSWE, or AWS/Azure/GCP security certifications
Benefits
- Health (Medical & Prescription), Dental, and Vision Care
- Onsite Health Centers (MO & IL)
- Employee Assistance Program
- Wellness program
- Profit Sharing
- 401k Plan with Company Matching
- Life and Disability Insurance
- Flexible Spending Accounts
- Tuition Reimbursement
- PTO & Holidays
- Parental Leave
- Medical Leave
- Military Leave
- Bereavement
- Day of Caring
- Family Planning Benefits
- Nursing Mothers Benefits
- Voluntary Legal
- Voluntary Supplemental Accident/Illness/Hospital
- Voluntary ID Theft
- Pet Insurance
- Employee Discount Program
Company Overview