Start searching
Back to Jobs
Recently postedFull timeTechnology

Cybersecurity - Security Engineer Sr.

SLG Millennium Group LLCPlano, Texas🇺🇸United States

Quick overview

SeniorityMid Senior
Employment typeFull Time
Work modeHybrid
LocationPlano, Texas, United States
CI/CD

Job description

Job Description Job Description

Senior Application Security Engineer - Policy & Platform
We are seeking a Senior Application Security Engineer to support enterprise application security initiatives with a focus on Application Security Posture Management (ASPM), vulnerability analysis, policy implementation, and developer enablement.
Key Responsibilities

  • Administer and support Application Security Posture Management (ASPM) platforms and security tooling.
  • Create and tune security policies that determine when vulnerabilities should be escalated, ticketed, suppressed, or prioritized.
  • Analyze and validate SAST and SCA findings, including root cause analysis and false-positive identification.
  • Partner with development teams to provide secure coding guidance and remediation recommendations.
  • Support secure SDLC initiatives and DevSecOps practices across application development teams.
  • Assist with platform escalations, vulnerability triage, and security operations activities.
  • Leverage automation, APIs, and AI-assisted workflows to improve application security operations.
  • Collaborate with cross-functional teams to strengthen security controls throughout the development lifecycle.
Required Qualifications
  • 6-10 years of cybersecurity or application security experience, with more than six years preferred.
  • CISSP certification required.
  • Deep understanding of Secure SDLC and application security principles.
  • Experience with Application Security Posture Management (ASPM) platforms or similar vulnerability management technologies.
  • Hands-on experience working with:
    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API Security Testing
    • DAST
    • Infrastructure-as-Code (IaC) Security
    • Mobile Security Testing
  • Ability to read and understand code for vulnerability analysis and root cause identification.
  • Experience identifying false positives and validating security findings.
  • Familiarity with DevSecOps practices, CI/CD pipelines, and automated security controls.
Preferred Qualifications
  • Experience integrating and optimizing AppSec tools and platforms.
  • Scripting and security workflow automation experience.
  • Experience using AI-driven security analysis and policy enforcement capabilities.
  • GWEB, GWAPT, CSSLP, or equivalent application security certifications.

Similar jobs

Apply