# Security Engineer – Application Security

**Company**: Fragomen
**Location**: US-Corporate Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://fragomen.wd115.myworkdayjobs.com/en-US/FragomenCareers/job/US-Corporate-Remote/Security-Engineer---Application-Security_REQ-025364?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_5dd2dd04-548

## Description

Fragomen is seeking a Security Engineer – Application Security to join our talented Cyber Security team in our Technology Innovation Lab in Pittsburgh. Our industry-leading, immigration specific software and supporting infrastructure is undergoing tremendous transformation and security is on the critical path to success in that endeavor. A professional, who is passionate about security, capable of effecting change, and ready to build a strong AppSec program, is what we seek.

You will be joining a small team of Security Engineers who make security a distinguishing factor in our technological offerings. A successful candidate will help engineer solutions to secure software development, identify threats and mitigate vulnerabilities throughout our environment.

**What an Application Security Engineer does at Fragomen:**

- Build, deploy and maintain tooling to validate and track security controls in and around our code

- Work closely with application development and infrastructure architectural teams to create code which is secure by design and default

- Create programmatic code reviews and automate penetration testing to decrease potential introduction of vulnerabilities

- Lead and collaborate with developers on secure coding techniques and threat modeling

- Contribute to vulnerability detection and remediation of technological offerings

- Deploy developed or OTS security applications to support our efforts

- Participate in a cross-functional response to cyber security incidents

- Work closely the security team to establish prevention, detection and mitigation techniques

- Deliver security guidance which aligns with NIST, ISO, SOC2 and other frameworks based on inputs

- Support the scoping and rules of engagement of our penetration testing regimen

**Let's talk if you have the following experience, knowledge, skills and education:**

- A passionate team player who builds knowledge and solves complex problems

- BA degree in a related field or a combination of related experience is a must

- 5+ years of web application development (.net, python, java, etc.)

- Secure SDLC (Software Development Life Cycle), DAST (Dynamic Application Security Testing), and SAST (Static Application Security Testing) experience

- One or more technical certifications that demonstrate expertise in cyber security, e.g. GSEC, CISSP, OSCP or a specialization, e.g. AWS SCS-C01, Microsoft SC-400

- Demonstrated understanding of web application penetration testing, secure coding and source code analysis

- Strong, professional communication skills that maintain under pressure

**These things are great, but not required:**

- Experience in developing highly automated detection and triage tools

- Deep understanding of cyber security red-team techniques

- Expertise in IAM, PAM, and Data Protection tools

- Experience with cloud native security tools

- Technical certification demonstrating technical prowess in secure software development e.g. Certified Secure Software Lifecycle Professional (CSSLP), or Certified Application Security Engineer (CASE) or similar

**Benefits:**

- 22 PTO days + Federal holidays

- Medical, Dental, and Vision plans + FSA & HSA Plans

- 401K plan, with company matching

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- web application development
- Secure SDLC
- DAST
- SAST
- cyber security
- penetration testing
- secure coding

### Nice to have
- highly automated detection and triage tools
- cyber security red-team techniques
- IAM
- PAM
- Data Protection tools
- cloud native security tools

---

Source: [Apply at fragomen.wd115.myworkdayjobs.com](https://fragomen.wd115.myworkdayjobs.com/en-US/FragomenCareers/job/US-Corporate-Remote/Security-Engineer---Application-Security_REQ-025364?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)