Application Security Engineer

Job Description

Insight Global is seeking an Application Security Engineer to join a growing Cyber Defense & Engineering team. This individual will play a key role in building and maturing an enterprise-wide Application Security program as the organization continues its cloud modernization efforts.

This is a highly visible, hands-on position focused on establishing security standards, implementing scalable AppSec practices, and partnering directly with development teams to improve application security across the organization. The ideal candidate enjoys building processes from the ground up and can effectively bridge the gap between security and engineering teams.

Responsibilities: Conduct application security assessments and secure code reviews. Lead threat modeling exercises for cloud and application modernization initiatives. Help establish application security standards, risk frameworks, and best practices. Implement and integrate security tooling within CI/CD pipelines. Partner with engineering teams to identify, prioritize, and remediate security vulnerabilities. Support Security Operations and Incident Response teams during application-layer security events. Drive adoption of secure-by-design and shift-left security practices across development teams.

Skills and Requirements

4+ years of experience in Application Security, Software Engineering, Cloud Engineering, or a related field. Strong understanding of application security principles, secure development practices, and modern attack vectors. Experience with threat modeling methodologies such as STRIDE, PASTA, or similar. Knowledge of OWASP Top 10, OWASP ASVS, and common web/API security vulnerabilities. Experience integrating security controls and testing into CI/CD environments. Understanding of OAuth 2.0, OIDC, SAML, and modern authentication patterns. Familiarity with containerized and cloud-native environments (Docker, Kubernetes, etc.). Preferred Qualifications Experience building or maturing an Application Security program. Experience with tools such as Fortify, Veracode, or Wiz. Azure and/or AWS cloud security experience. Exposure to API security testing, WAFs, and runtime application protection. Security certifications such as CISSP, OSCP, OSWE, GPEN, or GWAPT.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].