Information Security Application Engineer | Full-TIme Contract | Remote

🔐 Information Security Application Engineer | Full Time - Contract | Remote

We’re partnering with an established organization seeking an experienced Information Security Application Engineer for a contract opportunity. This is a highly hands-on Application Security / DevSecOps role focused on embedding security throughout the software development lifecycle across customer-facing eCommerce platforms, native mobile applications, APIs, microservices, and cloud services.

This is an excellent opportunity for someone who can bridge the gap between software engineering and cybersecurity, working directly with developers, architects, product teams, QA, DevOps, and platform engineering to identify risk early and translate security requirements into practical engineering solutions.

What You'll Be Doing

• Embed application security throughout the SDLC, from architecture and design through development, testing, deployment, and production support.
• Conduct threat modeling, architecture/design reviews, data-flow analysis, trust-boundary reviews, abuse-case analysis, and security risk assessments.
• Review source code, pull requests, application configurations, and Infrastructure as Code (IaC) for security vulnerabilities.
• Partner directly with developers to identify vulnerabilities and recommend practical, code-level remediation.
• Apply OWASP Top 10, OWASP ASVS, OWASP API Security Top 10, OWASP MASVS, and CWE principles across web, API, mobile, and cloud-native environments.
• Integrate and optimize SAST, DAST, Software Composition Analysis (SCA), secrets scanning, container scanning, IaC scanning, API testing, and mobile application security testing within CI/CD pipelines.
• Evaluate areas including authentication, authorization, session management, cryptography, secrets management, dependency risk, API security, logging, data protection, and secure communications.
• Triage security findings, assess exploitability and business impact, reduce false positives, and work with engineering teams through remediation.
• Assess third-party libraries, SDKs, APIs, SaaS integrations, and payment-related components for security risk.

What We're Looking For

• 4+ years of combined experience in software development, application security, security engineering, secure architecture, or a closely related technical discipline.
• Strong code-level literacy and the ability to review and discuss application code with developers.
• Experience with one or more modern languages such as JavaScript/TypeScript, Java, C#, Python, Swift, Kotlin, or Go.
• Strong understanding of web, API, native mobile, microservices, and cloud-native application security.
• Hands-on DevSecOps experience implementing security controls within CI/CD environments.
• Experience with development workflows including Git, pull requests, code review, build pipelines, automated testing, artifact repositories, and issue tracking.
• Familiarity with REST/GraphQL APIs, containers, microservices, API gateways, identity providers, and secrets-management platforms.
• Ability to translate complex security risks into actionable engineering guidance without becoming a bottleneck to delivery.
• A collaborative, pragmatic approach and the ability to build credibility with software engineers and architects.

Highly Valued Experience

Experience securing any of the following would be especially attractive:

• High-volume eCommerce or customer-facing digital platforms
• Native iOS / Android applications
• Payment-related systems
• Privacy-sensitive applications
• Regulated environments
• Cloud-native and microservices architectures

Security certifications such as CSSLP, GWAPT, GWEB, GSSP, CISSP, or CCSP are beneficial but not required.

Opportunity Details

📍 Remote

📄 Contract opportunity

⏱️ Full-time engagement, approximately 40+ hours/week

Interested?

If you're an Application Security Engineer, Product Security Engineer, Software Security Engineer, or DevSecOps Security Engineer who enjoys working directly with development teams and influencing how secure applications are designed and built, I'd like to connect.

Please message me directly or apply to learn more.

#ApplicationSecurity #AppSec #DevSecOps #CyberSecurity #InformationSecurity #ProductSecurity #CloudSecurity #OWASP #APISecurity #MobileSecurity #SAST #DAST #SoftwareSecurity #ContractJobs