Software and Application Security Engineer

Job Summary:

- Role: Sr. Software Engineer / Application Security Specialist (6-month Contract to Hire W2 only)
- Location: Lake Mary FL (Fully Remote)
- Core Purpose: Bridge development and security teams to ensure secure coding practices and strengthen application/cloud security.
- Main Focus:
- Hands-on vulnerability analysis and remediation
- Application security for Java/JavaScript and open-source libraries
- Secure architecture guidance for cloud environments (primarily AWS)
- Key Responsibilities:
- Set up and operate security testing aligned with company policies and reference architecture
- Analyze open-source threats and vulnerabilities including zero-day risks
- Identify prioritize and remediate high-risk components and vulnerabilities
- Coach teams on code refactoring patching and dependency updates
- Recommend and implement engineering design changes for security
- Champion secure coding practices and lead security reviews
- Advise software engineering teams on secure coding and threat detection
- Administer and configure security tools and document secure configurations
- Build partnerships with engineering security and architecture teams
- Stay current on emerging threats controls and mitigation measures
- Effectively communicate security risks and remediation strategies to stakeholders
- Ensure integration with development change management and compliance processes
- Serve as a thought leader and influencer for application security
- Required Skills:
- Strong background in software development (Java/JavaScript/Python)
- Deep expertise in application security secure coding and vulnerability management
- Experience with SCA/SAST/DAST tools (Sonatype SonarQube Qualys AWS Inspector)
- Knowledge of cloud security (AWS ECS/EKS Lambda Docker Terraform)
- Familiarity with industry standards (OWASP CWE CVE WASC)
- Experience guiding teams on security best practices
- Soft Skills:
- Excellent communication and relationship-building abilities
- Analytical problem-solving and creative thinking skills
- Positive proactive attitude; willingness to learn and adapt
- Ability to explain security concepts to technical and non-technical audiences
- Education:
- Bachelors degree in Computer Science or Engineering (or equivalent experience)
- AWS and security certifications preferred
- Bonus/Preferred:
- Mortgage industry experience
- Experience with AI security
- Experience leading small teams and driving security initiatives
- Key Deliverables:
- Implement/manage secure coding practices
- Conduct code vulnerability analysis and remediation
- Create security roadmaps and dashboards
- Lead proof-of-concepts for security tools
- Collaborate on cloud and application security strategy
- Interview Focus:
- Demonstrated experience bridging development and security
- Artifacts (diagrams dashboards) showing hands-on remediation
- Security posture improvement case studies
- Knowledge of AWS security DevSecOps and vulnerability management tools