Application Security Engineer

Location: Remote

Duration: 6-12 Months Contract

We are seeking experienced Senior Application Security Engineers to join our team and play a critical role in validating AIgenerated vulnerability findings and translating them into actionable technical remediation. This position requires strong expertise in application and product security combined with a deep understanding of how vulnerabilities map to code and how developers remediate them in production environments. The ideal candidate will have a background as a software engineer who transitioned into AppSec bringing both security insight and practical development knowledge.

• Validate AIgenerated vulnerability findings (e.g. from Anthropics Mythos) and assess exploitability severity and business impact.

• Trace vulnerabilities to their technical root cause at the code level.

• Collaborate with development teams to design and implement secure remediation strategies.

• Conduct secure code reviews threat modeling and vulnerability assessments.

• Define and enforce secure SDLC practices across product teams.

• Provide guidance on API security OWASP Top 10 risks and secure design principles.

• Partner with product owners and engineering teams to ensure vulnerabilities are remediated effectively and deployed safely.

• Document findings remediation steps and best practices to strengthen organizational security posture.

• Strong background in Application Security / Product Security.

• Handson experience with OWASP Top 10 SAST vulnerability assessment secure SDLC threat modeling code review API security.

• Ability to validate findings assess severity and trace vulnerabilities to root cause.

• Experience working directly with developers to remediate vulnerabilities.

• Strong communication skills to bridge security and engineering teams.

• A software engineer turned AppSec professional someone who understands both the security problem and how developers actually fix it.

• Proven ability to work across multiple product teams enabling secure development practices.

• Experience with modern CI/CD pipelines and integrating security tooling into developer workflows.

Required Skills:

Vulnerabilitythreatsecurity