Application Security Engineer (Contractor)

Role overview Help strengthen application security across a portfolio of SaaS platforms by embedding security practices into software development and production operations. This is a hands-on engineering role reporting to the security executive, with work spanning security tooling, code and application reviews, developer guidance, automation, and incident support.

Responsibilities - Support initiatives that improve security throughout application development and evaluate tools that can strengthen security and scale with the platforms. - Conduct internal penetration tests and code reviews; analyze source code and help teams remediate vulnerabilities. - Create and maintain threat models for software projects. - Advise developers on secure coding and vulnerability remediation, and encourage ongoing process improvements. - Use AI to automate security workflows and reduce manual effort. - Prepare project updates, contribute to security training, guide development teams, and assist with incident response.

Requirements - Three to five years of scripting and development experience, preferably supporting web applications. - Two to three years of cloud engineering experience; infrastructure-as-code experience and AWS familiarity are preferred. - Knowledge of application security practices and standards such as OWASP, ASVS, secure development life cycles, or BSIMM. - Sound judgment in assessing and prioritizing technical risks, plus familiarity with security tools and methods. - Clear communication skills for explaining security issues to technical and non-technical partners, and a collaborative approach to removing team bottlenecks. - Familiarity with AI tools, including agent-based automation.

Nice to have - Experience with NIST or HIPAA requirements.

Benefits and work setup - Remote, 12-month contract with potential to hire. - Compensation is $62 per hour.