Note: The job is a remote job and is open to candidates in USA. SPECTRAFORCE is seeking an Application Security Engineer to assess internally developed and third-party applications and improve enterprise application security. The role focuses on developing AI-driven assessment automation, documenting risks and recommendations, tracking remediation, and collaborating with engineering, product, and vendor teams.

Responsibilities

• Conduct security assessments of internally developed and third-party applications across the enterprise
• Collaborate with engineering, product, and vendor teams to understand application architecture and identify potential security risks
• Develop and maintain standardized assessment frameworks and methodologies tailored to various application types and deployment models
• Develop AI tools and techniques to automate and streamline security assessments, including compliance and policy enforcement, threat modeling, and supply chain security evaluation
• Document findings and provide actionable recommendations to improve application security posture
• Track remediation efforts and validate fixes to ensure risk reduction
• Contribute to the development of secure design patterns and reusable security components
• Stay current with emerging threats, vulnerabilities, and AI-driven security innovations
• Goal is to develop AI automation, and work alongside FTEs to fast track security systems

Skills

• 8+ years of experience in cybersecurity, including hands-on assessment and remediation
• Strong understanding of secure software development practices, threat modeling, and vulnerability management
• Experience with security assessment tools and platforms, including AI-enhanced solutions
• Familiarity with cloud-native architectures, APIs, and modern development frameworks
• Excellent communication skills and ability to influence cross-functional teams
• Bachelor's or master's degree in computer science, cybersecurity, or a related field or equivalent experience required
• Certifications such as CISSP, OSCP, or CSSLP are a plus

Company Overview

Company H1B Sponsorship