Remote Application Security Engineer Jobs
82 Application Security Engineer jobs available for remote work from home. Apply for positions such as Senior Application Security Engineer, Senior Application Security Engineer, Senior Application Security Engineer and more! Discover the best work-from-home or hybrid, full- and part-time jobs.
Trusted by 300,000+ remote workers worldwide.
The role involves planning and executing application security testing throughout the software development lifecycle to identify and mitigate vulnerabilities. Additionally, the engineer will lead AI security initiatives, perform threat modeling, and collaborate with development teams to implement secure design practices.
The Senior Application Security Engineer will own security partnerships with product engineering teams to drive high-impact security initiatives and risk reduction. They will design scalable security solutions, conduct threat models, and act as a subject matter expert to mentor other engineers.
You will design security guardrails, automation, and AI-powered tooling to enable engineering teams to ship software securely from commit to production. The role involves architecting security controls for CI/CD pipelines, supply chain integrity, and establishing threat modeling practices across the enterprise.
The Staff Application Security Engineer will own the AppSec program strategy, define security architecture standards, and integrate security tools into CI/CD pipelines. They will also lead threat modeling sessions, manage security exceptions, and serve as the primary interface between development teams and IT leadership.
The Application Security Engineer will triage and validate security findings while partnering with engineering teams to remediate vulnerabilities. They will also integrate security tooling into CI/CD pipelines and perform threat modelling to ensure the platform remains secure.
We watch for new remote application security engineer jobs and email you the matches. Free. Unsubscribe in one click.
Establish secure software development standards and integrate security into the design and development of GenAI and emerging business products. Triage security issues, perform threat modeling, and build automation tools to defend the company's infrastructure and applications.
The Senior Application Security Engineer will lead application security practices, manage penetration testing programs, and collaborate with development squads to remediate vulnerabilities. They will also implement security automation and maintain perimeter protections across cloud services and CI/CD pipelines.
The Senior Application Security Engineer will lead security practices across applications, APIs, and cloud services while managing external penetration testing programs. They will collaborate with development squads to remediate critical vulnerabilities and integrate security automation into CI/CD workflows.
The Application Security Engineer will embed security throughout the software development lifecycle by partnering with engineering teams to design secure systems and identify vulnerabilities. Responsibilities include conducting threat modeling, performing code reviews, managing vulnerability workflows, and implementing runtime protections.
Lead security initiatives across the SDLC and provide strategic mentorship to improve development practices through scalable automation. Partner with cross-functional teams to conduct threat modeling, security architecture reviews, and drive remediation of vulnerabilities.
The Application Security Engineer will identify, validate, and remediate vulnerabilities across digital platforms while managing SAST and DAST programs. They will collaborate with development teams to implement security fixes and perform manual security testing on web applications and APIs.
The Staff Application Security Engineer will lead security strategy and threat modeling across the development pipeline and multi-cloud environments. They will collaborate with engineering teams to integrate security principles and manage vulnerabilities in both cloud and open-source products.
You will lead the global strategy for open-source security and static analysis, integrating automated security guardrails into CI/CD pipelines. Additionally, you will collaborate with engineering teams to perform threat modeling and architectural reviews to proactively mitigate vulnerabilities.
You will lead security assessments, code reviews, and risk mitigation strategies across web, mobile, and cloud applications. Additionally, you will collaborate with DevOps teams to embed security into CI/CD pipelines and provide guidance on secure coding practices.
You will own security findings end-to-end, from manual validation and exploitability assessment to working with developers on root cause fixes. Additionally, you will embed security gates into CI/CD pipelines and perform threat modelling for new features and application architectures.
Triage and validate vulnerability submissions for managed bug bounty programs, assessing their validity, accuracy, and severity. Communicate with clients and researchers to obtain needed information, escalate critical vulnerabilities, and contribute to tools that improve the triage and validation process.
We watch for new remote application security engineer jobs and email you the matches. Free. Unsubscribe in one click.
Perform application security assessments, source-code reviews, and penetration testing while managing vulnerability remediation. Collaborate with cross-functional teams to integrate security tools into CI/CD pipelines and provide secure coding guidance.
The Senior Security Engineer will own the technical security of the cloud-native healthcare platform, focusing on threat modeling, secure design, and identity management. They will also design security architecture for agentic AI workflows and ensure compliance with HIPAA standards.
The Application Security Engineer will operate and maintain security scanning tools across the SDLC while triaging and prioritizing vulnerability findings. They will collaborate directly with engineering teams to ensure remediation and contribute to internal documentation and automation improvements.
You will own the application security for Lingokids apps, backend services, and AWS infrastructure. This includes running threat modeling, managing security tooling in CI/CD pipelines, and ensuring compliance with privacy regulations like COPPA and GDPR.
The Application Security Engineer will lead security assessments, code reviews, and risk mitigation strategies across web, mobile, and cloud applications. They will also collaborate with DevOps teams to embed security into CI/CD pipelines and provide security training to developers.
The Staff Application Security Engineer will define and drive the product security architecture and strategy across a cloud-native SaaS platform. This role involves leading threat modeling, implementing secure SDLC practices, and securing AI-driven and agentic technologies.
You will be responsible for reviewing CVE reproduction environments for technical accuracy and evaluating the effectiveness of proposed security fixes. Additionally, you will verify that security patches address root causes without introducing regressions or breaking application functionality.
The Senior Application Security Engineer will own and improve the secure software development lifecycle, including performing threat modeling and deep code-level analysis. They will also drive vulnerability management and partner cross-functionally to implement security guardrails across product, platform, and AI-powered features.
The Staff Application Security Engineer will lead the multi-year application security strategy and drive cross-team initiatives to improve security standards. They will also perform hands-on security architecture reviews, threat modeling, and vulnerability management for complex, high-scale systems.
We watch for new remote application security engineer jobs and email you the matches. Free. Unsubscribe in one click.
You will automate security processes within the CI/CD pipeline and manage the bug bounty program while collaborating with development teams to resolve vulnerabilities. Additionally, you will perform threat modeling, conduct design reviews, and lead efforts to promote security best practices across the organization.
You will manage and automate the vulnerability pipeline by triaging and remediating findings from various security tools and manual assessments. Additionally, you will identify root causes of security issues to implement secure defaults and patterns across the platform.
The application security engineer establishes and enforces security standards while conducting regular assessments and vulnerability remediations. They collaborate with engineering teams to integrate security into the SDLC, manage security tools, and oversee software supply chain security.
The Product and Application Security Engineer will execute security across the full product ecosystem, including firmware, hardware, and cloud platforms. They will act as a technical authority to identify, validate, and remediate vulnerabilities while embedding security into the development lifecycle.
Stop the endless job search. Our AI finds and applies to the best jobs for you.
The average salary for remote Application Security Engineers is $180,951 per year. This is based on data from 18 job openings. We use the yearly salaries in US dollars from these job postings to calculate salary expectations. Below is a breakdown of salary data by years of experience:
| Experience | Salaries counted | Average salary |
|---|---|---|
| Senior5–10 years | 10 | $185,553 |
| Lead10+ years | 7 | $181,986 |
We reviewed 39 job postings for remote Application Security Engineers and found these are the skills employers ask for most often:
| Skill | Share of job posts |
|---|---|
| Application security | 100% |
| Threat modeling | 69% |
| SAST | 64% |
| Python | 64% |
| DAST | 51% |
| SCA | 46% |
| Penetration testing | 44% |
| Vulnerability Management | 41% |
| API security | 38% |
| Cloud Security | 38% |
Everything you need to know about remote work
