Application Security Engineer

Requirements:

• Bachelors degree in Computer Science, Information Security, or a related field, or equivalent experience
• 7+ years of experience in application security, DevSecOps, or a related role
• Strong knowledge of secure coding practices in .NET and Salesforce Apex
• Experience with Salesforce security architecture and Azure App Services
• Proficiency with CI/CD pipelines and integrating security tools into Git and Azure DevOps workflows
• Familiarity with NIST 800-53, NIST CSF, and other cybersecurity frameworks
• Hands-on experience with SAST, DAST, SCA, and container security tools
• Strong scripting skills in PowerShell, Python, Bash, or similar languages
• Preferred: OSCP, GWAPT, CSSLP, or Salesforce Security Specialist certification

Responsibilities:

• Review Salesforce Apex code, Visualforce pages, and Lightning components for security vulnerabilities
• Configure and monitor Salesforce security settings, including profiles, permission sets, role hierarchies, sharing rules, and field-, object-, and record-level access controls
• Validate secure Salesforce integrations with external APIs and third-party applications, and enforce OAuth scopes, connected app policies, and IP restrictions
• Conduct Salesforce security health checks and Salesforce Shield audits
• Align Salesforce security architecture with NIST 800-53 and NIST CSF controls
• Work with development teams to embed security best practices throughout the SDLC
• Conduct secure code reviews for applications built on Salesforce, .NET, and Azure
• Design and review application architectures for alignment with NIST controls
• Perform threat modeling and risk assessments for new and existing applications
• Maintain and improve security integrations with Git, Azure DevOps, and other version control systems
• Conduct manual and automated penetration testing of web applications and APIs
• Identify and remediate vulnerabilities in Salesforce customizations, .NET codebases, and Azure-hosted services
• Configure, tune, and maintain DevSecOps tools such as SonarQube, Checkmarx, Veracode, and Fortify
• Monitor and report on security tool performance and coverage
• Map application security controls to NIST standards, support audit readiness, and document security requirements with traceability to NIST control families
• Partner with engineering, QA, and operations teams to promote security awareness and provide training
• Advise teams on secure coding standards and remediation strategies
• Support incident response related to application vulnerabilities
• Contribute to risk assessments and mitigation planning

Technologies:

• Apex
• Azure
• Bash
• CI/CD
• DevSecOps
• DevOps
• Git
• Support
• OAuth
• PowerShell
• Python
• Salesforce
• Security
• Visualforce
• Web
• ASP.NET
• Cloud

More

We are seeking a skilled, proactive Application Security Engineer to join our security team. In this role, you will help safeguard applications across Salesforce, .NET, and Azure App Services.

last updated 43 week of 2026