application security engineer

<div>
 Work with the industry leader
 
 
 At Eon, our mission is to make patients healthier and healthcare affordable. Eon Patient Management ("EPM") identifies patients with disease risk and streamlines clinical decision analysis so clinicians can work at the top of their licenses. With unique solutions across multiple disease states, we drive unprecedented adherence to care pathways, so that more patients are seen and more survive. When patients win, healthcare systems win - both clinically and financially.
 
 
 As a market leader in incidental tracking and patient management, Eon is pioneering the use of Artificial Intelligence to enable healthcare enterprises, ranging from small health systems to large, national-scale IDNs. We have a unique and dynamic team that is focused on results, and employment opportunities both local to our Denver office, and remote based.
 
 
 This really is the perfect role!
 
 
 
 The Opportunity
 
 
 
 As an Application Security Engineer, you will be improving Eon's application security posture and keeping the platform secure throughout the Software Development Life Cycle (SDLC)! We are looking for someone who loves to analyze, test and triage application vulnerabilities, participate in code and product security reviews, and help our Developers bake security into their day-to-day workflows and CICD. You will partner closely with our Product and Engineering teams, and external testers, so solid interpersonal skills are a must. This role is a great opportunity to advance an application security program and drive remediation of security weaknesses with an enterprise-wide impact!
 
 
 
 In This Role You Will
 
 
 
 <ul>
 <li>
 Be an advocate for application security within the organization
 </li>
 <li>
 Help develop and maintain a risk-based application security program based on a well-defined application security framework
 </li>
 <li>
 Ensure the platform complies with healthcare-specific security standards such as HIPAA and HITRUST, and follow best practices for handling sensitive patient data.
 </li>
 <li>
 Find common patterns and themes within application vulnerabilities and work with Development teams to address the root causes
 </li>
 <li>
 Participates in the strategic decisions related to the requirements, design, implementation, and operations of application security framework, processes, and technology
 </li>
 <li>
 Execute security-focused code, architecture and integration reviews
 </li>
 <li>
 Coordinate or conduct penetration testing and drive remediation efforts to completion
 </li>
 <li>
 Collaborate with DevOps teams to integrate security testing tools (SAST/DAST) into CI/CD pipelines to enable DevSecOps practices.
 </li>
 <li>
 Keep abreast of the latest security issues and technologies
 </li>
 <li>
 Own and improve process and procedural documentation
 </li>
 <li>
 Assist with daily activities and functions of the Security team (including alert &amp; incident response) to maintain security posture as well as policy and compliance commitments
 
 
 </li>
 </ul>
 
 Skills &amp; Requirements
 
 
 
 <ul>
 <li>
 Deep knowledge and familiarity with Cybersecurity Framework, including NIST 800-53, NIST CSF, CIS Top 20, MITRE ATT&amp;CK, and OWASP Top Ten
 </li>
 <li>
 Deep knowledge of crypto, authentication and authorization protocols and standards, including SSL/TLS, SAML, OAuth, JWT Tokens is a must
 </li>
 <li>
 Possess a relentless desire to (ethically) break into things and can communicate the attack scenarios and mitigation options based on standard framework is desired
 </li>
 <li>
 Ability to read and understand Java, JavaScript, and Python
 </li>
 <li>
 Ability to automate repetitive tasks, using Python or other scripting language, is a plus
 </li>
 <li>
 Experience working in regulated industries, with a focus on healthcare security standards (HIPAA, HITRUST) is a plus.
 
 
 </li>
 </ul>
 
 Nice-to-have
 
 
 
 <ul>
 <li>
 2+ years of experience in web application penetration testing or a security-focused application development role is a must
 </li>
 <li>
 AWS Security, CEH, GWEB, GCIH or equivalent certifications are preferred
 </li>
 <li>
 Ability to work in a diverse, fast-paced environment and effectively collaborate across teams
 </li>
 <li>
 Outstanding written and oral communication skills with demonstrated ability to clearly articulate to both a technical and functional audience
 
 
 </li>
 </ul>
 &ldquo;So what&rsquo;s in it for me,&rdquo; you ask?
 
 
 We pride ourselves for being a culture-based company buzzing with high-energy. Aside from the enthusiastic environment, you'll enjoy:
 
 
 <ul>
 <li>
 Competitive salary
 </li>
 <li>
 Health insurance
 </li>
 <li>
 Referral bonuses
 </li>
 <li>
 Generous vacation time
 </li>
 <li>
 Paid Maternity and Paternity leave
 </li>
 <li>
 Work from home days
 </li>
 <li>
 Lunch facility within office
 </li>
 <li>
 Travel allowance
 </li>
 <li>
 Company equipment (laptop, internet device, screens etc)
 </li>
 <li>
 Professional development and career growth opportunities
 </li>
 <li>
 Awesome team members
 
 
 </li>
 </ul>
 If we still have your attention, don't delay, send us your resume!
 
 
</div>

Application Security Engineer

Amerisafe Inc

<div><div>AMERISAFE is seeking a detail-oriented, productivity driven professional to add to our &ldquo;Excellence Team.&quot; The Application Security Engineer will have responsibility within the IS and IT department for securely analyzing, planning, coding and documenting software systems and technology solutions in support of business objectives. This position will work under the leadership of the Vice President of Information Security and will be remote.</div><div></div><div> 
Upon an offer and acceptance of employment with AMERISAFE, you will be required to complete our pre-employment screening, which includes a criminal background check, a 10-panel drug test and, if applicable, a review of your motor vehicle report. A 10-panel drug test includes amphetamine/methamphetamine, barbiturates, benzodiazepines, cocaine metabolite (BZE), marijuana metabolite (THCA), methadone, methaqualone, codeine/morphine, phencyclidine, propoxyphene.</div><div></div> 
Qualifications:<ul><li>
Relevant BS/BA degree and/or equivalent education/work experience in software system analysis and development</li><li>
Proven ability to work collaboratively and constructively with IT teams, including development, quality, support, and infrastructure, to produce high-quality software products</li><li>
Experience in understanding, capturing, and documenting technical and functional system requirements to meet business needs and expectations</li><li>
Experience with multiple application and database development toolsets and methodologies, especially Microsoft technologies</li><li>
Experience with software development life cycle concepts, practices, techniques, and procedures</li><li>
Excellent written and verbal communication skills and demonstrated ability to effectively communicate with staff, co-workers, management, and external personnel</li><li>
Excellent analytical, interpretive, problem-solving, and evaluative skills for decision making</li><li>
Excellent organizational, reporting, and time management skills</li><li>
Demonstrated customer-service orientation and attitude</li><li>
Demonstrated ability in creative thinking, self-direction, and initiative</li><li>
Demonstrated ability to thrive in a dynamic and high-pressure environment</li><li>
Willing to work extended hours and weekends and travel occasionally</li><li>
Foster the AMERISAFE culture by embracing the pillars of consistency, focus, frugality, ownership and service</li></ul><div></div><div> 
Duties and Responsibilities:</div> 
<div></div><ul><li>
Participate in and support a highly collaborative development environment</li><li>
Collaborate with cross-functional teams to design, develop, and implement application security and delivery solutions that ensure the confidentiality, integrity, and availability of critical applications and services</li><li>
Develop automation to streamline network and application deployment, configuration, and maintenance tasks</li><li>
Implement and manage Web Application API Protection and Web Application Firewall solutions to safeguard web applications and APIs from threats and vulnerabilities</li><li>
Conduct requirements gathering and documentation through investigation of existing software systems, observation of current business processes, and interviews with company staff</li><li>
Analyze, plan, design, develop, code, and debug new software systems as well as enhancements to legacy systems according to specified requirements</li><li>
Evolve and standardize cybersecurity reference architectures for new systems and applications covering on-prem, SaaS, IaaS, and PaaS</li><li>
Create performance metrics to measure the effectiveness of new and existing cybersecurity capabilities, tools, and services</li><li>
Identify and report risks and evaluate opportunities associated with software systems and other technology solutions</li><li>
Support and adhere to established IT and Company policies, procedures, standards, and controls</li><li>
The position may require additional duties to be assigned.</li></ul></div>

VakıfBank

<div>
 
 Bankam&inodot;z
 
 Bilgi Teknolojileri Siber G&uuml;venlik Ekipleri
 
 b&uuml;nyesinde Ankara veya &Idot;stanbul'daki ofisimizde g&ouml;revlendirilmek &uuml;zere tak&inodot;m&inodot;m&inodot;za kat&inodot;lmak ister misiniz?
 
 
 
 
 
 
 Aranan Nitelikler:
 
 
 
 
 
 
 &Uuml;niversitelerin Bilgisayar, Yaz&inodot;l&inodot;m M&uuml;hendisli&gbreve;i veya Elektrik-Elektronik, Elektronik Haberle&scedil;me, Y&ouml;netim Bili&scedil;im Sistemleri b&ouml;l&uuml;mlerinden mezun olmak,
 
 
 
 
 
 Uygulama g&uuml;venli&gbreve;i, penetrasyon testleri, g&uuml;venli yaz&inodot;l&inodot;m geli&scedil;tirme ya&scedil;am d&ouml;ng&uuml;s&uuml; (SDLC) ve &uuml;&ccedil;&uuml;nc&uuml; taraf g&uuml;venlik de&gbreve;erlendirmeleri alanlar&inodot;nda minimum 4 y&inodot;l pratik deneyime sahip olmak,
 
 
 
 
 
 OWASP Top 10 ba&scedil;ta olmak &uuml;zere yayg&inodot;n g&uuml;venlik a&ccedil;&inodot;klar&inodot; ve test metodolojileri konusunda derin bilgi sahibi olmak; web, mobil ve altyap&inodot; g&uuml;venlik testlerinde tecr&uuml;beli olmak,
 
 
 
 
 
 Statik ve dinamik kod analizi yapabilmek, g&uuml;venli yaz&inodot;l&inodot;m geli&scedil;tirme prensipleri konusunda bilgi sahibi olmak,
 
 
 
 
 
 Red Team faaliyetleri, sald&inodot;r&inodot; sim&uuml;lasyonlar&inodot; ve kapsaml&inodot; penetrasyon testleri konusunda saha deneyimi bulunmak,
 
 
 
 
 
 Modern yaz&inodot;l&inodot;m geli&scedil;tirme s&uuml;re&ccedil;lerine (Agile, CI/CD, DevSecOps vb.) a&scedil;ina olmak ve bu ortamlarda g&uuml;venlik uygulamalar&inodot;n&inodot; entegre edebilmek,
 
 
 
 
 
 Tercihen uluslararas&inodot; ge&ccedil;erlili&gbreve;i olan g&uuml;venlik sertifikalar&inodot;na sahip olmak (&ouml;rn. OSCP, OSWE, eWPTX, eMAPT vb.),
 
 
 
 
 
 Teknik ve teknik olmayan ekiplerle etkili &scedil;ekilde ileti&scedil;im kurabilen, karma&scedil;&inodot;k g&uuml;venlik risklerini sade ve anla&scedil;&inodot;l&inodot;r bi&ccedil;imde aktarabilen g&uuml;&ccedil;l&uuml; ileti&scedil;im yetkinlikleri.
 
 
 
 
 
 
 G&ouml;rev ve Sorumluluklar:
 
 
 
 
 
 
 Web uygulamalar&inodot;, API&rsquo;ler, mobil platformlar ve a&gbreve; altyap&inodot;s&inodot; &uuml;zerinde kapsaml&inodot; s&inodot;zma testleri, Red Team tatbikatlar&inodot; ve g&uuml;venlik de&gbreve;erlendirmeleri y&uuml;r&uuml;tmek,
 
 
 
 
 
 CI/CD s&uuml;re&ccedil;lerine g&uuml;venlik kontrollerini entegre etmek; geli&scedil;tirici, DevOps ve d&inodot;&scedil; tedarik&ccedil;i ekiplerle yak&inodot;n i&scedil; birli&gbreve;i i&ccedil;inde &ccedil;al&inodot;&scedil;arak g&uuml;venli yaz&inodot;l&inodot;m geli&scedil;tirme yakla&scedil;&inodot;m&inodot;n&inodot; yayg&inodot;nla&scedil;t&inodot;rmak,
 
 
 
 
 
 Yaz&inodot;l&inodot;m&inodot;n erken a&scedil;amalar&inodot;nda zafiyetleri tespit edebilmek i&ccedil;in g&uuml;venlik odakl&inodot; kod incelemeleri ve dinamik uygulama testleri ger&ccedil;ekle&scedil;tirmek,
 
 
 
 
 
 Uygulama g&uuml;venli&gbreve;ini s&uuml;rekli iyile&scedil;tirmeye y&ouml;nelik g&uuml;venlik s&uuml;re&ccedil;leri geli&scedil;tirmek, uygulamak ve bu s&uuml;re&ccedil;leri uluslararas&inodot; standartlarla (OWASP, NIST, CIS vb.) uyumlu hale getirmek,
 
 
 
 
 
 Teknik bulgular&inodot;n &ouml;nceliklendirilmesini ve &ccedil;&ouml;z&uuml;m &ouml;nerilerini i&ccedil;eren detayl&inodot; raporlar ve y&ouml;netici &ouml;zetleri haz&inodot;rlamak,
 
 
 
 
 
 Yaz&inodot;l&inodot;m geli&scedil;tirme ekiplerine teknik dan&inodot;&scedil;manl&inodot;k ve e&gbreve;itim sa&gbreve;layarak g&uuml;venlik fark&inodot;ndal&inodot;&gbreve;&inodot;n&inodot; art&inodot;rmak,
 
 
 
 
 
 Yeni &ccedil;&inodot;kan tehditler, g&uuml;venlik a&ccedil;&inodot;klar&inodot; ve sekt&ouml;rel geli&scedil;meleri yak&inodot;ndan takip ederek uygulama g&uuml;venli&gbreve;i stratejilerini g&uuml;ncel tutmak.
 
 
 
 
 
 
 Bize Kat&inodot;l&inodot;n:
 
 
 
 
 
 
 Bu pozisyon yeni teknolojileri &ouml;&gbreve;renmeye hevesli profesyoneller i&ccedil;in b&uuml;y&uuml;k f&inodot;rsatlar sunmaktad&inodot;r. E&gbreve;er siz de h&inodot;zl&inodot; de&gbreve;i&scedil;en bir teknoloji ortam&inodot;nda sorumluluk almay&inodot; ve kendi yetkinliklerinizi geli&scedil;tirerek ekip ba&scedil;ar&inodot;s&inodot;na katk&inodot; sa&gbreve;lamay&inodot; istiyorsan&inodot;z, ba&scedil;vurunuzu bekliyoruz!
 
 
 
</div>

Revolut

<div>About Revolut
People deserve more from their money. More visibility, more control, and more freedom. Since 2015, Revolut has been on a mission to deliver just that. Our powerhouse of products &mdash; including spending, saving, investing, exchanging, travelling, and more &mdash; help our 60+ million customers get more from their money every day.
As we continue our lightning-fast growth,&zwnj; 2 things are essential to our success: our people and our culture. In recognition of our outstanding employee experience, we've been certified as a Great Place to Work&trade;. So far, we have 10,000+ people working around the world, from our offices and remotely, to help us achieve our mission. And we're looking for more brilliant people. People who love building great products, redefining success, and turning the complexity of a chaotic world into the simplicity of a beautiful solution.
About the role
Our Technology team builds the systems and experiences that keep Revolut moving. From the infrastructure behind our innovative app to the features used by millions of people around the world, they bring sharp thinking, speed, and a focus on meaningful impact to everything they do.
About the Rev-celerator Internship programme
The Rev-celerator Internship programme is designed for top students seeking to make the most of their summer by working alongside industry professionals, taking on real-world challenges, and honing their skills. Embark on a paid, 3-month adventure where you'll gain hands-on experience, broaden your network, and seize the chance to learn, grow, and influence the future of finance. Join us for a summer of innovation and growth.
You may expect for ours Application Security Engineer to keep our software safe from threats and vulnerabilities. You'll be designing and building apps with security in mind while testing, monitoring, and protecting our systems along the way.
We're looking for an Application Security Engineer Intern who&rsquo;s looking to get involved and step into the future of finance through this career-boosting opportunity.
Join us from anywhere
The Rev-celerator Internship Programme is now open to international candidates from around the world, willing to relocate to one of our tech hubs in the UK, UAE, Poland, or Spain. We&rsquo;ll support you every step of the way - from visa assistance (if needed) to travel costs and accommodation. We&rsquo;re here to make your move as smooth as possible. Please check further details with your assigned recruiter, as conditions may apply.
Key Dates:
Application period: June 1&ndash;December 14, 2025
Recruitment process: September 2025 &ndash;January 2026
Programme start: June/July 2026 
Up for the challenge? Let&rsquo;s get in touch
What you'll be doing<ul><li>
Running security scans</li><li>
Checking for common OWASP issues</li><li>
Reviewing system configurations with guidance and checklists</li><li>
Running SAST and DAST scans to identify vulnerabilities</li><li>
Documenting findings from security tests</li><li>
Flagging security issues to senior engineers and developers</li><li>
Researching emerging security threats</li><li>
Contributing to internal documentation and knowledge bases</li><li>
Participating in security training sessions</li></ul> 
What you'll need<ul><li>
On track to achieve a 2:1 or higher in your degree, or an equivalent academic standing internationally</li><li>
A portfolio of multiple coding side projects or open source contributions</li><li>
Penultimate year of a bachelor&rsquo;s or master&rsquo;s degree in a relevant field (computer science, mathematics, or physics)</li><li>
Expected graduation in 2027</li><li>
A proactive mindset</li><li>
Passion for problem-solving</li><li>
Fluency in English</li><li>
The ability to learn quickly and adapt to new challenges</li><li>
A results-driven mindset with ambition to grow</li><li>
Excellent communication and organisational skills</li><li>
Comfort working as part of a team in a fast-paced environment</li><li>
Full availability for the programme (summer 2026)</li></ul>
Building a global financial super app isn&rsquo;t enough. Our Revoluters are a priority, and that&rsquo;s why in 2021 we launched our inaugural D&amp;I Framework, designed to help us thrive and grow everyday. We're not just doing this because it's the right thing to do. We&rsquo;re doing it because we know that seeking out diverse talent and creating an inclusive workplace is the way to create exceptional, innovative products and services for our customers. That&rsquo;s why we encourage applications from people with diverse backgrounds and experiences to join this multicultural, hard-working team.
Important notice for candidates:
Job scams are on the rise. Please keep these guidelines in mind when applying for any open roles.<ul><li>Only apply through official Revolut channels. We don&rsquo;t use any third-party services or platforms for our recruitment.</li><li>Always double-check the emails you receive. Make sure all communications are being done through official Revolut emails, with an @revolut.com domain.</li></ul>
We won't ask for payment or personal financial information during the hiring process. If anyone does ask you for this, it&rsquo;s a scam. Report it immediately.
By submitting this application, I confirm that all the information given by me in this application for employment and any additional documents attached hereto are true to the best of my knowledge and that I have not wilfully suppressed any material fact. I confirm I have disclosed if applicable any previous employment with Revolut. I accept that if any of the information given by me in this application is in any way false or incorrect, my application may be rejected, any offer of employment may be withdrawn or my employment with Revolut may be terminated summarily or I may be dismissed. By submitting this application, I agree that my personal data will be processed in accordance with Revolut's Candidate Privacy Notice
Notice: This is a remote position based in United Arab Emirates.</div>

Rev-celerator Internship Programme 2026: Information Security Engineer (Appsec)

DICETEK LLC

<div>Security Engineer
Position Overview
We are looking for an experienced Security Engineer with 7-10 years of proven expertise in application, infrastructure, and cloud security. The ideal candidate will have hands-on experience in penetration testing, DevSecOps practices, cloud security (AWS &amp; Azure), and security architecture. They will also play a key role in building a strong security culture, driving awareness, and collaborating with multiple teams to integrate security seamlessly across the organization.
Responsibilities<ul><li>
Perform penetration testing of web applications, mobile applications, and APIs.</li><li>
Perform secure code reviews to identify vulnerabilities in application code, scripts, and configurations.</li><li>
Configure, fine-tune, and review results from SAST, DAST, IaC, container, and dependency scanning tools.</li><li>
Drive DevSecOps initiatives, including security integration in CI/CD pipelines.</li><li>
Review and enhance Kubernetes security, container security, and infrastructure security.</li><li>
Contribute to security architecture design and reviews for applications, infrastructure, and cloud.</li><li>
Conduct threat modeling, risk assessments, and vulnerability management.</li><li>
Establish and deliver security training, awareness sessions, and best practices to teams.</li><li>
Collaborate with development, DevOps, and infrastructure teams to ensure secure design and delivery.</li><li>
Act as a security advisor to stakeholders, explaining risks and recommendations in simple, non-technical terms.</li><li>
Participate in incident response and post-incident reviews, ensuring lessons learned are applied.</li><li>
Stay updated on emerging threats, attack techniques, and new security technologies.</li></ul>
Qualifications<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Security, or related field.</li><li>
7-10 years of experience in information security roles.</li><li>
Strong expertise in penetration testing (web, mobile, API) with hands-on experience.</li><li>
Hands-on experience with SAST, DAST, SCA, IaC scanning, and container security tools (e.g., SemGrep, Checkmarx, Veracode, BurpSuite, ZAP, Prisma, Trivy, etc.).</li><li>
Deep understanding of DevSecOps principles, CI/CD pipeline security, and security automation.</li><li>
Knowledge of cloud security best practices in AWS and Azure (e.g., IAM, networking, encryption, monitoring).</li><li>
Familiarity with Kubernetes, Docker, and container runtime security.</li><li>
Solid grasp of security architecture and secure design principles.</li><li>
Strong scripting skills (Python, Bash, or similar).</li><li>
Excellent communication and stakeholder management skills.</li></ul>
Good to Have<ul><li>
Certifications such as OSCP, OSWE, CISSP, CCSP, CKS, CKA, AWS Security Specialty, or Azure Security Engineer Associate.</li><li>
Exposure to GRC frameworks (ISO 27001, SOC 2, NIST, CIS).</li><li>
Familiarity with privacy and compliance requirements (GDPR, PCI DSS, HIPAA, etc.).</li></ul>
Soft Skills<ul><li>
Strong analytical and problem-solving mindset.</li><li>
Ability to explain technical risks to non-technical audiences.</li><li>
Collaborative approach, working effectively with development, DevOps, product, and leadership teams.</li><li>
Passion for continuous learning and building a culture of security.</li></ul></div>

Security Engineer

Search 10000+ Application security engineer jobs near you this September. New roles added regularly across leading industries. Apply today.

10000 application security engineer jobs NEAR_ME

Application Security Engineer

Application Security Engineer

Application Security Engineer

Rev-celerator Internship Programme 2026: Information Security Engineer (Appsec)

Security Engineer

Security Engineer

Security Engineer