Senior Cybersecurity Engineer – Application Security
Location: Seattle, Washington
Work Arrangement: Hybrid
Contract Duration: 3-month, possible extension, W2
Schedule: Monday-Friday, 9:00 AM-6:00 PM PST
Pay: $80/hr
Position Overview
We are seeking an experienced Senior Cybersecurity Engineer to support enterprise application security initiatives. This role will focus on conducting security assessments of internally developed and third-party applications, identifying vulnerabilities and security risks, and partnering with engineering, product, and vendor teams to drive remediation.
A major focus of the position will be developing AI-driven security automation to streamline application security assessments, compliance and policy enforcement, threat modeling, and software supply chain security evaluations.
The ideal candidate has a strong background in hands-on application security, secure software development, vulnerability management, and modern cloud and API-based environments.
Key Responsibilities
- Conduct security assessments of internally developed and third-party applications across the enterprise.
- Review application architectures to identify vulnerabilities, design weaknesses, and potential security risks.
- Partner with engineering, product, security, and vendor teams throughout the assessment and remediation process.
- Develop and maintain standardized security assessment frameworks and methodologies for different application and deployment models.
- Build and enhance AI-based tools and automation to accelerate security assessments.
- Apply automation to areas including:
- Threat modeling
- Compliance and policy enforcement
- Security assessment workflows
- Software supply chain security
- Document security findings and provide clear, actionable remediation recommendations.
- Track remediation activities and validate completed fixes to confirm risk reduction.
- Contribute to secure design patterns and reusable security components.
- Support secure software development practices throughout the application lifecycle.
- Stay current with emerging vulnerabilities, threats, application security practices, and AI-driven security capabilities.
- Work alongside internal security teams to accelerate and improve enterprise security processes.
Required Qualifications
- 8+ years of cybersecurity experience, including hands-on security assessment and remediation experience.
- Strong knowledge of application security and secure software development practices.
- Hands-on experience with:
- Application security assessments
- Vulnerability identification and remediation
- Threat modeling
- Vulnerability management
- Secure software development
- Experience with security assessment tools and platforms, including AI-enhanced security solutions.
- Familiarity with cloud-native application architectures.
- Experience evaluating or securing APIs and modern application frameworks.
- Strong understanding of security risk and remediation practices.
- Excellent written and verbal communication skills.
- Ability to collaborate with and influence engineering, product, security, and other cross-functional teams.
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
Technical Environment
Experience with or exposure to the following technologies is relevant to this position:
- GitHub
- Python
- Bash
- PowerShell
- Cloud-native architectures
- APIs
- Application security assessment tools
- AI-enhanced security solutions
- Security automation
- Threat modeling
- Vulnerability management
- Software supply chain security
Preferred Qualifications
- CISSP, OSCP, CSSLP, or similar security certification.
- Experience developing security automation.
- Experience applying AI to cybersecurity assessments and workflows.
- Experience evaluating software supply chain security.
- Experience assessing both internally developed and third-party applications.
- Strong understanding of secure application architecture and reusable secure design patterns.
#LI-EP1