Application Security Engineer with CodeQL

Key Responsibilities
Strengthen software security by improving development processes, enhancing security controls, and reducing software defects and vulnerabilities
Use CodeQL to support static application security testing, identify code vulnerabilities, and facilitate remediation
Collaborate with development teams to integrate security requirements into the software development lifecycle
Analyze distributed data and security findings to produce clear, actionable insights
Work with application security tools, including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and secrets management solutions
Identify common application vulnerabilities, attack vectors, and remediation strategies
Apply secure software design principles and industry best practices throughout the development lifecycle
Integrate application security testing tools into Agile development environments
Support secure coding practices, code reviews, threat modeling, and security requirements analysis
Conduct architectural risk assessments and recommend appropriate security controls
Implement and scale enterprise application security tools, services, and controls
Apply recognized security frameworks and standards, including OWASP, CIS, and NIST
Required Qualifications
8+ years of experience
Bachelors Degree
Skills
CodeQL
Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
Secrets Management Solutions
Application Security Testing
Secure Coding Practices
OWASP Framework
CIS Framework
NIST Framework
Threat Modeling
Security Requirements Analysis
Architectural Risk Assessment
Secure Code Review
Vulnerability Remediation
Security Data Analysis
Cross-functional Collaboration
Enterprise Security Tool Implementation and Scaling
Agile Delivery
Schedule
Start date: 2026-10-30