DontApply.Club
Login Register

Application Security Engineer

Amtex Systems Inc — United States · Posted ~23 hours ago

Mid Full-time

Skills

application security JavaScript front-end security WordPress security vulnerability remediation PHP GCP CI/CD security infrastructure as code PCI compliance WordPress TypeScript Ruby React Angular AWS Kubernetes Python CI/CD

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary ✨ AI‑Generated

Take ownership of application security across a large portfolio of web applications. Your focus will be identifying and remediating vulnerabilities in plugins, custom code, and third-party packages, while supporting cloud security, CI/CD protection, infrastructure-as-code security, and payment-related compliance. A development background and strong JavaScript/web security knowledge are essential.

Highlights

Security-focused engineering role centered on reducing application vulnerability exposure across a large web estate. Offers hands-on work in vulnerability remediation, cloud security, secure CI/CD, compliance, and collaboration with development teams.

Description

Required Strong AppSec engineer with development background.Must understand JavaScript/front-end code enough to identify and remediate vulnerabilities.WordPress security experience is the biggest priority. Primary Need Reduce backlog of application security vulnerabilities.~400 WordPress websites to secure.Majority of work is remediating vulnerable plugins, custom code, and third-party packages.Maintain Ruby API (Gem updates); Python API experience is transferable.Secondary Focus Ongoing application security within GCP (and some AWS/Kubernetes).~20% of websites have migrated.Help secure CI/CD pipeline, security keys, and infrastructure as code.Day-to-Day Work alongside developers, but not embedded on a dev team.Review vulnerability scans and recommend/fix remediations.Maintain PCI compliance for payment pages.Less feature development, more security-focused engineering.Technical Environment WordPressJavaScript / TypeScriptPHPRuby (nice to have)React or AngularGCP, AWS, KubernetesCI/CDSecurity scanning tool called Wiz (or similar file system vulnerability scanner).