application security engineer

RuShaM IT Services LLC

<p>Application Security Engineer &ndash; Data Security</p><p><b>Location:</b> Plano, TX (Hybrid &ndash; 3 days onsite per week)<br/><b>Duration:</b> 6+ Months Contract (Extension Possible)</p><p>Overview</p><p>We are seeking an <b>Application Security Engineer &ndash; Data Security</b> to join a global cybersecurity team focused on protecting enterprise data through automation, secure application development, and modern security technologies. This role requires a hands-on engineer who enjoys solving complex security challenges, building scalable solutions, and collaborating with cross-functional teams.</p><p>Note: Candidates must be local to Plano, TX and able to work onsite 3 days per week.Responsibilities</p><ul><li>Develop and maintain automation, tooling, and scalable software solutions for enterprise data security initiatives.</li><li>Build security-focused applications using <b>Python, JavaScript</b>, and object-oriented languages such as <b>Java, C++, or C#</b>.</li><li>Support <b>Data Loss Prevention (DLP), Cloud Data Protection, Data Classification, Encryption, Access Governance</b>, and related cybersecurity initiatives.</li><li>Integrate APIs and automation tools to collect KPIs/KRIs and improve operational efficiency.</li><li>Work with <b>CI/CD pipelines</b> and cloud platforms including <b>AWS, Azure, or GCP</b>.</li><li>Collaborate with Security Operations, Enterprise Architecture, Privacy, Legal, and Platform Engineering teams.</li><li>Create technical documentation including system architecture, design documents, and data flow diagrams.</li><li>Identify security vulnerabilities and implement improvements across enterprise applications and platforms.</li></ul><p>Required Skills</p><ul><li>4+ years of experience in <b>Cybersecurity, Software Development, or Computer Engineering</b>.</li><li>Strong programming experience with <b>Python</b> and <b>JavaScript</b>.</li><li>Hands-on experience with <b>Java, C++, or C#</b>.</li><li>Experience with one or more data security technologies:</li><li><b>DLP</b></li><li><b>CASB</b></li><li><b>SASE</b></li><li><b>DSPM</b></li><li><b>PAM</b></li><li>Experience with endpoint security technologies.</li><li>Experience working with <b>AWS, Azure, or GCP</b>.</li><li>Knowledge of <b>Git, CI/CD pipelines, Docker, and containerization</b>.</li><li>Strong understanding of:</li><li>Encryption vs. Hashing</li><li>Authentication vs. Authorization</li><li>Secure Secrets Management/Vaults</li><li>Salting and Weak Hashing Algorithms</li></ul><p>Preferred Qualifications</p><ul><li>Experience working in Agile development environments.</li><li>Security certifications such as:</li><li>Security+</li><li>CEH</li><li>CISSP</li><li>OSCP</li><li>CISM</li><li>CISA</li><li>GPEN</li><li>GWAPT</li></ul><p>Pay: $60.00 - $65.00 per hour</p><p>Work Location: Hybrid remote in Plano, TX 75023</p>

Application Security Engineer - Data Security

Cvent

<div>Overview:
<p><b>
Our Culture and Impact</b></p><p>
Cvent is a leading meetings, events, and hospitality technology provider with more than 5,500+ employees and ~30,000 customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we&rsquo;re transforming the meetings and events industry through innovative technology that powers the human connection.</p><p>
Cvent's strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, taking risks and making decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.</p><p><b>
AI at Cvent: Leading the Future</b></p><p>
Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we&rsquo;re committed to continuous learning and adaptation&mdash;AI isn&rsquo;t just a tool for us, it&rsquo;s part of our DNA. We&rsquo;re looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you&rsquo;ll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.</p><p>
Throughout our interview process, you&rsquo;ll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you&rsquo;re excited to be part of a team that&rsquo;s leading the way in AI-powered collaboration, we&rsquo;d love to meet you.</p><p></p><p><br>
We're seeking a senior, builder-minded Application Security Engineer who can go deep on hard technical problems while setting the direction for how AI reshapes a security program. This isn't someone who just uses AI tooling &mdash; it's someone who architects it: agentic systems that automate threat modeling end to end, AI-assisted vulnerability management, and self-serve security capabilities that change how an engineering org works. The ideal candidate is equally credible doing a rigorous design review, writing the automation that scales it, and communicating the resulting risk decisions to leadership. This role owns product security for the teams it partners with &mdash; they look to this person as the accountable security voice for their roadmap.</p>
In This Role, You Will::
<ul><li>Architect and own AI-first security automation &mdash; design agentic systems and skills that take security work from intake (e.g., a Jira epic or design doc) through analysis to logged risk and published findings, with minimal manual handoff.</li><li>
Lead the development of security agents and AI tooling &mdash; define the architecture for LLM-integrated workflows (via APIs and MCP connectors), set patterns for tool/function design, and decide build-vs-buy across the toolchain.</li><li>
Drive AI-assisted threat modeling at scale &mdash; benchmark custom solutions against off-the-shelf agents, embed methodologies (STRIDE, PASTA, LINDDUN, MITRE ATT&amp;CK) into automation, and make pentest scoping decisions defensible and repeatable.</li><li>
Set the standard for AI feature security &mdash; define coverage models and assessment criteria for GenAI and AI/ML features, applying the OWASP LLM Top 10, OWASP AI Testing Guide, and MITRE ATLAS to real product risk.</li><li>
Own integration and scaling of SAST, DAST, and SCA across CI/CD, including AI-assisted triage layers that cut noise and accelerate remediation.</li><li>
Perform and lead deep secure design reviews, code reviews, threat modeling, and penetration testing for complex and high-risk systems, including cloud-native and AI-driven architectures.</li><li>
Own product security for an assigned product area or portfolio &mdash; serve as the accountable security partner for those teams, drive their threat modeling, design reviews, and risk decisions end to end, and own the security posture and remediation outcomes for that scope.</li><li>
Mentor Engineer II and mid-level teammates, review their automation and findings, and grow the team's AI and AppSec capability.</li><li>
Communicate risk clearly to both engineering and leadership audiences, and support compliance efforts across ISO 27001, SOC 2, and PCI.</li></ul>
Here's What You Need::
<ul><li>5+ years of hands-on experience in application security or secure software development, with demonstrated technical ownership.</li><li>
Strong scripting/programming skills &mdash; the ability to design and build non-trivial internal tools and automation in Python, JavaScript/TypeScript, or Bash.</li><li>
Proven experience integrating security tooling into CI/CD and the SDLC, and improving it over time.</li><li>
Strong familiarity with cloud platforms (AWS preferred; GCP or Azure acceptable) and cloud-native security, including securing applications built with AWS CDK / IaC.</li><li>
Proficiency with security testing and cloud security tools (e.g., Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz) and the judgment to know when manual testing beats automation.</li><li>
Deep understanding of the OWASP Top 10, CWE, SANS Top 25, secure coding practices, and web/API vulnerability classes.</li><li>
Demonstrated end-to-end ownership of at least one security tool, automation, or agentic/LLM-integrated workflow that is used in production or relied on by a team &mdash; designed, shipped, and depended on by others. This is the primary, screenable differentiator from the Engineer II role.</li></ul><p><b>
Bonus If You Have:</b></p><ul><li>
Experience securing AI/ML pipelines and a working understanding of adversarial ML, prompt injection, and agent-misuse risk.</li><li>
DevSecOps, IaC security, or supply-chain depth, and senior-relevant certifications (e.g., OSWE, OSCP, AWS Security &ndash; Specialty, CISSP).</li></ul><div><p><b>
Why You'll Love This Role</b></p></div><div><ul><li>
You'll define how AI transforms Application Security at scale &mdash; architecting automation and agents that change how an entire engineering org ships secure software.</li><li>
You'll join the ASRE team to innovate at the forefront of AI-assisted AppSec, with the autonomy to set technical direction.</li><li>
You'll work with teams who take security seriously and back you to drive meaningful, lasting change.</li><li>
You'll have both technical depth and leadership impact, with a path to grow into staff-level or lead roles.</li></ul></div><p></p><div><p><i><br>
This job posting is intended to comply with all applicable laws. If we learn during the course of our recruitment process that, due to an applicant&rsquo;s location, further information about the position is required, including certain salary information, this information in this posting will be supplemented accordingly.</i></p><p><i>
The estimated base salary range for new hires into this role is $120,000 - $160,000 annually + bonus depending on factors such as job-related knowledge, relevant experience, and location. We also offer a competitive benefits package, details of which can be found </i><i>here</i><i>.</i></p><div></div><div><br>
Hybrid:<b> 2 days in office</b></div><div><i><br>
We are not able to offer sponsorship for this position</i></div><div></div><div><i><br>
Physical Demands</i></div></div><br>
<p></p>
LinkedIn Remote Type: #LI-Hybrid Indeed Remote Type: WFH Flexible</div>

Senior Engineer, Application Security

BV Teck

<div><b>AI Security Engineer &ndash; Remote</b><br>
<br>
Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.<br>
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.<br>
<br>
<b>Job Title:</b> AI Security Engineer<br>
<b>Location: 1</b>00% Remote (U.S.)<br>
<b>Position Type: </b>Full-time, Direct W2<br>
<b>Salary Range: </b>$80,000&ndash;$105,000 Annually<br>
<b>Experience Required: </b>6+ years<br>
<br>
<b>Sponsorship: </b>U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.<br>
<br>
<b>Job Summary</b><br>
We are seeking an AI Security Engineer to lead the design and implementation of security controls, threat models, and incident response capabilities specifically tailored to AI and machine learning systems. The role addresses the unique security challenges posed by LLMs, model APIs, training data pipelines, and AI-powered applications, including prompt injection, model abuse, data exfiltration, and supply chain risks. The ideal candidate has strong security engineering fundamentals and a deep understanding of how modern AI systems work in practice, with hands-on experience designing defenses for both AI-powered applications and the AI infrastructure that supports them.<br>
<br>
<b>Required Qualifications</b><ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Cybersecurity, or a related discipline.</li><li>
Six or more years of security engineering experience, including significant work on AI or ML systems.</li><li>
Strong understanding of LLM internals, modern AI architectures, and common failure modes.</li><li>
Hands-on experience designing security controls for AI-powered applications.</li><li>
Deep knowledge of application security, identity, and cryptography fundamentals.</li><li>
Experience with threat modeling and security architecture review processes.</li><li>
Familiarity with adversarial ML, prompt injection, and model abuse research.</li><li>
Proficiency in Python and at least one systems language.</li><li>
Strong understanding of cloud security and modern infrastructure controls.</li><li>
Excellent written and verbal communication skills.</li></ul><b>
Preferred Qualifications</b><ul><li>
Publications, talks, or CTF participation in AI security topics.</li><li>
Experience with red-teaming LLM-based products.</li><li>
Familiarity with privacy-preserving ML techniques such as differential privacy.</li><li>
Exposure to regulated industries with strict data handling requirements.</li><li>
Open-source contributions to AI security tooling.</li></ul><b>
How to Apply</b><br>
Would you like to know more about this opportunity? For immediate consideration, please send your resume to hilda@bvteck.com. Learn more about Bright Vision Technologies at www.bvteck.com.<br>
Bright Vision Technologies is an Equal Opportunity Employer.<p>
Equal Employment Opportunity (EEO) Statement</p>
<p>Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.</p>
<p>BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.</p><p>
</p><p>VNl8uTu0fi</p></div>

AI Security Engineer

SoFi

<div><div><p><b>Employee Applicant Privacy Notice</b></p>
<p><b>
Who we are:</b></p>
<div>
<p>Shape a brighter financial future with us.</p>
<p>
Together with our members, we're changing the way people think about and interact with personal finance.</p>
<p>
We're a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we're at the forefront. We're proud to come to work every day knowing that what we do has a direct impact on people's lives, with our core values guiding us every step of the way. <b>Join us to invest in yourself, your career, and the financial world.</b></p>
</div></div><p><b>
The role</b></p><p><br>
We are seeking a Staff Vulnerability Management Engineer to lead the most complex technical work in SoFi's Vulnerability Management program. You will design and build scalable systems that identify, enrich, prioritize, route, and track vulnerabilities across applications, cloud and infrastructure, containers, software supply chains, and specialized hardware or firmware surfaces. This is a hands-on engineering role with broad technical influence: you will write production code, make architecture decisions, establish vulnerability management standards, and improve how teams understand and reduce vulnerability risk.</p><p><br>
You will partner with Engineering, Infrastructure, SRE, Compliance, Legal, and business stakeholders to accelerate remediation while protecting engineering velocity and customer trust. You will also serve as a senior technical responder for embargoed disclosures and zero-day events, lead root-cause analysis for high-impact vulnerability incidents, and mentor engineers. The ideal candidate combines deep vulnerability management expertise with strong software engineering judgment, systems thinking, and a bias for durable, measurable outcomes.</p><p><br>
<b>
What you'll do</b></p>
<ul>
<li> Lead high-complexity vulnerability management initiatives and make architecture decisions for assigned program areas, from detection and assessment through ticket routing, remediation, exception handling, and closure validation.</li>
<li>Design, build, and productionize scalable triage and prioritization automation, including scanner and asset integrations, enrichment pipelines, decision logic, deduplication, ownership resolution, service-level tracking, observability, and failure recovery.</li>
<li>Develop risk-based prioritization models that combine CVSS, EPSS, CISA Known Exploited Vulnerabilities, threat intelligence, asset criticality, exposure, compensating controls, business context, and compliance obligations.</li>
<li>Engineer and improve vulnerability workflows across application security, cloud and infrastructure, containers and Kubernetes, open-source dependencies, secrets, software supply chain, and hardware-adjacent surfaces such as GPU, DPU/BlueField, BMC, and firmware.</li>
<li>Own or materially advance software supply chain capabilities, including SBOM inventory, dependency visibility, SLSA-aligned controls, and integration of SAST, SCA, secret scanning, and container scanning into CI/CD.</li>
<li>Act as a senior technical responder for critical vulnerabilities, embargoed disclosures, and zero-day events; coordinate technical assessment, containment, mitigation, patch deployment, validation, and executive communication with service owners and incident response teams.</li>
<li>Partner directly with development and platform teams to define practical remediation paths and, when appropriate, review or contribute secure changes in Python, Go, JavaScript/TypeScript, or infrastructure code.</li>
<li>Define technical standards for vulnerability severity, remediation service levels, exceptions, evidence, and closure criteria; ensure workflows support audit-ready reporting for applicable regulatory and compliance frameworks.</li>
<li>Produce actionable metrics, dashboards, and risk insights for technical and executive audiences, with clear accountability, trend analysis, compliance posture, and execution risks.</li>
<li>Lead root-cause analysis for high-impact vulnerability incidents and convert lessons learned into durable improvements to tooling, architecture, controls, and operating practices.</li>
<li>Evaluate and responsibly apply AI/ML and LLM-assisted techniques to security triage and decision support, with human-in-the-loop validation, measurable quality controls, and safe failure modes.</li>
<li>Build AI-assisted remediation workflows that partner with engineering teams to proactively identify, validate, and apply security patches, with appropriate testing, human oversight, rollback mechanisms, and measurable risk reduction.</li>
<li>Communicate complex security tradeoffs and program risks clearly to stakeholders across Engineering, Product, Operations, Legal, Compliance, and executive leadership.</li></ul><br>
<p><br>
<b>What you'll need</b></p>
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.</li>
<li>Deep expertise in vulnerability management, security engineering, and modern infrastructure, including cloud, containers, and distributed systems.</li>
<li>Strong programming or scripting skills in Python, Go, Java, or similar languages, with experience building automation at scale.</li>
<li>Deep knowledge of vulnerability management methods and standards, including CVSS, EPSS, CISA KEV, threat intelligence integration, asset and exposure context, remediation SLAs, exception governance, and risk-based prioritization.</li>
<li>Hands-on experience with modern vulnerability and application security tooling such as Wiz, Semgrep, Snyk, Socket, Rapid7, Tenable, Checkmarx, or equivalent platforms, plus experience tuning SAST, SCA, secret scanning, container, or cloud findings.</li>
<li>Experience designing end-to-end workflows that integrate scanners, asset inventories or CMDBs, ticketing systems, CI/CD platforms, data stores, dashboards, and alerting systems.</li>
<li>Working knowledge of cloud-native and software supply chain environments, including AWS, GCP, or Azure; Kubernetes and containers; build systems and package managers; SBOMs; and Infrastructure as Code.</li>
<li>Demonstrated ability to lead cross-functional technical initiatives, influence without direct authority, make sound decisions amid ambiguity, and drive work from concept through production operation and measurable outcomes.</li>
<li>Experience mentoring senior and developing engineers and raising engineering quality through design reviews, code reviews, standards, and incident leadership.</li>
<li>Strong written and verbal communication, business judgment, and the ability to explain how security choices affect engineering velocity, regulatory obligations, customer trust, and business risk.</li></ul><br>
<p><br>
<b>Nice to have</b></p>
<ul>
<li>Experience managing security partnerships with hardware or software vendors, including embargoed disclosures, coordinated vulnerability disclosure, and pre-release remediation collaboration.</li>
<li>Production experience with security orchestration platforms such as Tines and serverless frameworks such as AWS Lambda or Google Cloud Functions.</li>
<li>Experience scaling vulnerability management in a high-growth, cloud-native environment or operating within FedRAMP, PCI DSS, SOC 2, ISO 27001, NIST, or comparable regulated environments.</li>
</ul><div><div><b>Compensation and Benefits</b></div>
<div>The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.</div>
<div></div>
<div>To view all of our comprehensive and competitive benefits, visit our <b>Benefits at SoFi</b><b> </b>page!</div>
<h5 class="jobSectionHeader">SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.</h5>
<h5 class="jobSectionHeader">The Company hires the best qualified candidate for the job, without regard to protected characteristics.</h5>
<h5 class="jobSectionHeader">Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</h5>
<h5 class="jobSectionHeader">New York applicants: Notice of Employee Rights</h5>
<h5 class="jobSectionHeader">SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email <b>accommodations@sofi.com.</b></h5>
<h5 class="jobSectionHeader">Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.</h5>
<div><b>Internal Employees</b></div>
<div>If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.</div></div></div>

Staff Vulnerability Management Engineer

Everforth ECS

<div><p>Everforth ECS is seeking an <b><i>Authentication Engineer </i></b>to work in our <b><i>Washington, DC </i></b>office / <b><i>remote</i></b>. <b>The role is contingent upon additional funding.</b></p>
<p>
</p><p>We are seeking a technically focused and detail-oriented <b>Authentication Engineer</b> to join our Identity Governance and Administration (IG&amp;A) team. This role is dedicated to the deployment, management, and continuous improvement of enterprise authentication systems, with a particular emphasis on Multi-Factor Authentication (MFA) and modern identity protocols.</p>
<p>
</p><p>You will work at the intersection of identity security and user experience, ensuring that authentication systems are correctly configured, performing reliably at scale, and aligned with the organization's security policies. This is a proactive role where you will identify gaps in authentication coverage, evaluate emerging authentication technologies, and work across teams to drive adoption and strengthen the organization's overall identity security posture.</p>
<p>
</p><p>If you bring deep technical knowledge of authentication systems, experience integrating them across complex enterprise environments, and the communication skills to support both technical teams and end users, we want to hear from you.</p>
<p>
</p><p><i>Salary Range: $120,000 - $130,000</i><br>
<i>General Description of Benefits</i></p>
Requirements:
<p>MFA &amp; Authentication Systems</p>
<ul>
<li>Hands-on experience deploying and managing enterprise MFA platforms (e.g., Microsoft Authenticator, Duo, RSA SecurID, or equivalent)</li>
<li>Strong understanding of modern identity and authentication protocols including SAML, OAuth 2.0, OpenID Connect, and RADIUS torchora.com</li>
<li>Experience integrating MFA solutions with Active Directory, Azure Active Directory, and Single Sign-On (SSO) platforms</li>
<li>Ability to troubleshoot authentication failures across complex, multi-system enterprise environments</li>
<li>Experience developing and enforcing MFA policies aligned with organizational security standards and zero-trust principles</li>
</ul>
<p>Identity &amp; Access Management</p>
<ul>
<li>Working knowledge of enterprise identity and access management (IAM) frameworks and platforms</li>
<li>Familiarity with Microsoft Active Directory, Azure Active Directory, and related Windows-based systems</li>
<li>Understanding of privileged access management (PAM) concepts and how authentication controls integrate within that model</li>
<li>Ability to support risk assessments and security continuous monitoring efforts related to identity and authentication</li>
</ul>
<p>Collaboration &amp; Documentation</p>
<ul>
<li>Ability to support large, cross-functional projects and communicate clearly with both technical and non-technical stakeholders</li>
<li>Experience creating and maintaining clear documentation for authentication configurations, procedures, and troubleshooting guides</li>
<li>Comfortable working with end users and support teams to resolve authentication issues and support MFA adoption at scale</li>
</ul>
<p>A minimum of 3+ years of experience in identity and access management, with direct hands-on experience deploying and managing enterprise authentication and MFA solutions. Candidates with experience supporting large-scale MFA deployments or authentication migrations will be strongly preferred.</p><br>
<br>
Req Benefits:
<div>Benefits - Everforth ECS</div></div>

Authentication Engineer

ATHENE

<div><p>We are driven to do more. More for our customers and the financial professionals who offer our products. If you are driven to do more and love the challenge of pursuing more, Athene is your kind of company. You will find we offer more than the basics to create an inclusive and dynamic work environment at our various locations.</p><p></p><p><b>
Purpose:</b></p>
At Athene, security is an enabler of innovation. As our Application Security Engineering Lead, you'll help define how secure software is built across the enterprise by engineering scalable security capabilities that empower developers while protecting our business, customers, and partners.
<br>
<br>
Working at the intersection of Application Security, Cloud Security, and Identity Engineering, you'll collaborate with Software Engineering, Cloud Platform Engineering, Enterprise Architecture, and Information Security to design reusable security platforms, automation, and developer-first capabilities. You'll also help shape how Athene securely adopts emerging technologies&mdash;including AI-powered applications and autonomous workloads&mdash;while solving complex engineering challenges at enterprise scale.
<br>
<br>
Backed by Apollo Global Management, Athene combines financial strength, innovation, and a collaborative culture built on our BEAM values&mdash;Believe in your co-workers, Engage actively, Act like owners, and Make it happen. You'll have the opportunity to influence enterprise security strategy while helping one of the fastest-growing retirement services organizations continue to innovate securely.<p></p><p><b>
Accountabilities:</b></p><div><div><p><b>
Key Deliverables</b></p></div><div><ul><li><p>
Design, build, and evolve reusable application and identity security capabilities, including identity-as-code, policy-as-code, developer self-service tools, security libraries, and platform integrations that make secure development the default.</p></li></ul></div><div><ul><li><p>
Partner with engineering teams to embed secure authentication, authorization, API security, and secure software design throughout the SDLC using modern standards including OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, mTLS, and PKI.</p></li></ul></div><div><ul><li><p>
Lead cloud identity engineering across AWS and Azure by developing scalable identity solutions, Infrastructure as Code guardrails, security automation, and modern workload identity capabilities.</p></li></ul></div><div><ul><li><p>
Drive security engineering innovation through automation, AI-enabled solutions, developer enablement, technical mentorship, and continuous improvement while advancing Athene's Security Guardians program.</p></li></ul></div></div><div><div><ul><li><p>
Define and implement enterprise security patterns for non-human identities, machine identities, AI agents, secrets management, certificate lifecycle management, and workload authentication to support the next generation of cloud-native applications.</p></li></ul></div></div><p><b><br>
Qualifications and Experience:</b></p><div><p><b>
What You Need to Bring</b></p></div><div><ul><li><p><b>
6+ years of relevant experience</b> in application security, software security engineering, cloud security, identity security, or relevant experience. <i>(Final years of experience should be confirmed against the approved job grade.)</i></p></li></ul></div><div><ul><li><p>
Deep expertise in secure software engineering practices, including OWASP Top 10, threat modeling, secure architecture, SAST, DAST, Software Composition Analysis (SCA), API security, and secure SDLC methodologies.</p></li></ul></div><div><ul><li><p>
Strong technical expertise implementing modern identity and authentication technologies, including OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, mTLS, PKI, certificate management, and secure service-to-service authentication.</p></li></ul></div><div><ul><li><p>
Hands-on experience securing AWS and Azure environments, Infrastructure as Code (Terraform and/or CloudFormation), CI/CD pipelines, and developing security automation using Python, Go, JavaScript, TypeScript, or similar languages.</p></li></ul></div><div><ul><li><p>
Demonstrated ability to influence technical decisions through collaboration, innovation, critical thinking, adaptability, creativity, a bias for action, and AI fluency to improve developer experience and strengthen enterprise security.</p></li></ul></div><div><ul><li><p>
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent professional experience.</p></li></ul></div><p></p><p>
Drive. Discipline. Confidence. Focus. Commitment. Learn more about working at Athene.</p><p></p><p>
Athene is a Military Friendly Employer! Learn more about how we support our Veterans.</p><p></p><p>
Athene is committed to inclusion and is proud to be an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, veteran status or any other status protected by federal, state or local law.</p></div><p></p>

Application Security Engineering Lead

Boeing

<p></p><div><p>At Boeing, we innovate and collaborate to make the world a better place. We&rsquo;re committed to fostering an environment for every teammate that&rsquo;s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.</p>
<p>The Product Security Engineering (PSE) organization is looking for <b>Product Security Engineers (Mid-Level)</b> to join our Cybersecurity Lifecycle teams supporting Boeing Commercial Airplanes (BCA) in <b>North Charleston, South Carolina</b>. The selected candidates will execute our vision and share our passion for protecting commercial airplanes products and the aviation ecosystem.</p>
<p></p><p><b>Position Responsibilities:</b></p>
<ul><li>Assess risks, threats, and vulnerabilities of the product assets and production systems in accordance with accepted industry, professional, and government standards to ensure security design integrity, availability, confidentiality, and regulatory compliance</li>
<li>Develop security requirements and coordinate with different systems stakeholders</li>
<li>Develop technical data and documentation in accordance with requirements and system security engineering processes and procedures for internal reference and external delivery</li>
<li>Coordinate with penetration testers to validate coverage and impacts to analysis</li>
<li>Review developed certification artifacts with FAA and Engineering Unit Members</li>
<li>Develop effective and innovative technical solutions with an awareness of consequences of judgements individually and through teams</li>
<li>Perform / lead the development, implementation, and communication of sustainment activities to ensure continued product security, safety, and resiliency of digitally-connected, in-service airplanes</li>
<li>Oversee configuration management and security of data, networks, and resources used to ensure continued product security and resiliency of in-service models</li>
</ul><p></p><p><b>Basic Qualifications (Required Skills/Experience):</b></p>
<ul><li>Bachelor of Science degree in Engineering, Engineering Technology (including Manufacturing Technology), Computer Science, Data Science, Mathematics, Physics, Chemistry or non-US equivalent qualifications directly related to the work statement</li>
<li>5+ years of related work experience in systems engineering, systems integration, software engineering, electrical engineering, certification, product security</li>
<li>Experience coordinating and presenting technical content to a variety of technical and non-technical audiences</li>
<li>Comprehensive understanding of airplane systems and networks</li>
</ul><p></p><p><b>Preferred Qualifications (Desired Skills/Experience):
</b></p><ul><li>Experience in cybersecurity, security network architecture, embedded systems security, security testing and evaluation, network design</li>
<li>Comprehensive understanding of DO-326B, DO-356A, DO-355</li>
<li>Related work experience in systems engineering, systems integration, software engineering, electrical engineering, certification, product security</li>
<li>Technical leadership with a positive and curious mindset</li>
<li>Possess one or more security certifications, including but not limited to: CISSP; Security+; CEH; CCNA; UNIX/LINUX System Administration; GIAC GPEN, GWAPT, or GXPN; Offensive Security Certified Engineer (OSCE); Offensive Security Certified Professional (OSCP)</li>
</ul><p></p><p><b>Conflict of Interest: Successful candidates for this job must satisfy the Company&rsquo;s Conflict of Interest (COI) assessment process.</b></p>
<p></p><p><b>Drug Free Workplace:
</b></p><p>Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.</p>
<p></p><p><b>Pay &amp; Benefits:</b></p>
<p>At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
</p><p></p><p>The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and several programs that provide for both paid and unpaid time away from work.
</p><p></p><p>The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.</p>
<p></p><p><i>Pay is based upon candidate experience and qualifications, as well as market and business </i><i>considerations.
</i></p><p></p><p><b>Summary Pay Range: </b>$128,350 - $173,650</p><br>
<br>
<p>Applications for this position will be accepted until <b>Aug. 15, 2026</b></p><br>
<br>
<p><b>Export Control Requirements:
</b></p><p>This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a &ldquo;U.S. Person&rdquo; as defined by 22 C.F.R. &sect;120.62 is required. &ldquo;U.S. Person&rdquo; includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.</p>
<p><b>Export Control Details:
</b></p><p>US based job, US Person required</p>
<p><b>Education
</b></p><p>Bachelor's Degree or Equivalent Required</p>
<p><b>Relocation
</b></p><p>This position offers relocation based on candidate eligibility.</p>
<p><b>Visa Sponsorship
</b></p><p>Employer will not sponsor applicants for employment visa status.</p>
<p><b>Shift
</b></p><p>This position is for 1st shift</p><br>
<br>
<p><b>Equal Opportunity Employer:</b></p>
<p>Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.</p></div>
<br><div><h2 class="jobSectionHeader"><b>Your Benefits</b></h2>
<p>No matter where you are in life, our benefits help prepare you for the present and the future.</p>
<ul><li>Generous company match to your 401(k).</li>
<li>Industry-leading tuition assistance program pays your institution directly.</li>
<li>Fertility, adoption, and surrogacy benefits.</li>
<li>Up to $10,000 gift match when you support your favorite nonprofit organizations.</li></ul><br>
<p>These programs are subject to eligibility requirements and other conditions, which may differ for employees of certain subsidiaries or business units, or union-represented employees depending on bargaining agreement terms. If this information conflicts with the program documents, the latter shall control. This material is informational only.</p></div>

Product Security Engineer (Mid-Level)

Search 9040+ Application security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.