Application Security Engineer (Remote - US)

This position is posted by Jobgether on behalf of a partner company. We are currently looking for an Application Security Engineer in the United States.

In this role, you will be responsible for safeguarding applications and services by implementing and maintaining robust security practices across software development and cloud infrastructure. You will work closely with engineering teams to identify vulnerabilities, remediate risks, and ensure security is embedded throughout the development lifecycle. This position offers the opportunity to influence secure architecture decisions, mentor junior security engineers, and contribute to cross-functional initiatives. Your work will directly impact the protection of sensitive data, system reliability, and the overall resilience of technology platforms in a dynamic, fast-paced environment.

Accountabilities:

• Develop, implement, and maintain a comprehensive security stack, including endpoint management, vulnerability management, and incident response.
• Administer and secure GitLab instances, ensuring smooth operation, performance, and protection against threats.
• Lead front-end security initiatives, including designing and reviewing micro frontends (MFEs) and API client libraries for React and Next.js applications.
• Collaborate with engineering teams to prioritize security issues and implement effective resolutions.
• Provide consultancy on risk assessment, threat modeling, vulnerability mitigation, and security best practices.
• Mentor junior security engineers and support the development of internal security tools and processes.
• Create and maintain security documentation, guidance, and metrics reporting.

• 2+ years of software engineering experience with a focus on security, information security, or cybersecurity.
• Hands-on experience with cloud application and infrastructure security (AWS, GCP, Azure).
• Expertise in Git and GitLab administration.
• Strong proficiency in front-end technologies including React, Next.js, HTML, CSS, TypeScript, and JavaScript.
• Knowledge of Micro Frontends, state management libraries such as Redux, and modern application architectures.
• Experience with containerization and orchestration technologies such as Docker, Kubernetes, Istio, or Envoy.
• Familiarity with databases and streaming platforms like MongoDB, Redis, and Kafka.
• Strong problem-solving, analytical, and communication skills, with the ability to work autonomously and collaboratively.
• Preferred: experience with logging/monitoring tools (Splunk, Elastic, Fluentd, Prometheus) and coding/scripting in Go, Python, or Java.