Application Security Engineer

Salary: $103000 - 142000 per year Requirements: Were looking for a Computer Science degree or a closely related qualification. We need at least 5 years of experience in security engineering, with a strong background in application security and DevSecOps. We expect hands-on experience securing applications in cloud environments. We require practical experience with vulnerability scanning tools, AST platforms, and cloud security solutions. We value formal experience with threat modeling and a strong ability to assess and prioritize risk. We prefer candidates with cloud expertise across AWS, Azure, or GCP. We look for familiarity with Infrastructure as Code and Policy as Code concepts. We want experience building and supporting secure software development lifecycle programs. We need knowledge of security standards and frameworks such as SOC 2, ISO 27001, and NIST 800-53. We require the ability to automate workflows and develop code-based solutions to recurring problems. We expect scripting or programming experience in languages such as Java, .NET, HTML, Ruby, PHP, Perl, C#, Python, JavaScript, PowerShell, or Bash. We value experience with penetration testing and web application assessments. We look for experience evaluating software compliance with HIPAA, PHI, PII, and PCI requirements. We welcome experience leading projects, initiatives, and resources through direct or indirect influence. Responsibilities: We manage and support application vulnerability scanning tools, AST platforms, and cloud security tooling. We collaborate with business partners to design secure applications, test for security weaknesses, and help remediate issues. We work with key stakeholders to identify, respond to, and resolve information security concerns. We coordinate the orchestration, automation, and administration of security technologies and platforms. We support day-to-day lifecycle activities, including identification, threat assessment, threat modeling, and risk avoidance. We prepare clear, actionable reports that show the impact on our security posture. We define and implement metrics to measure control effectiveness through KRIs and security scorecards. We serve as a subject-matter expert for application security and a primary contact for critical issues, risk assessments, and CI/CD triage. We evaluate business and technical needs to identify and implement tools, processes, and technologies that strengthen our security environment. We drive continuous improvement of our compliance processes. Technologies: AWS Azure Bash C# CI/CD Cloud DevSecOps GCP Support Java JavaScript PHP Perl PowerShell Python Ruby Security Web ASP.NET More: We are Cobalt Streamworks, and we help families navigate the aging journey with confidence through compassionate guidance, products, and services. We value diverse perspectives, inclusion, and belonging, and we invest in our local communities through grants, sponsorships, and employee volunteerism. This Application Security Engineer role is based in Richmond, Virginia or Lynchburg, Virginia. We also offer a strong employee well-being package that includes competitive compensation and total rewards, comprehensive healthcare coverage, multiple 401(k) options, employer-funded retirement contributions, paid time off with holidays, volunteer time off and family leave, disability, life, and long-term care insurance, tuition and student loan support, wellness reimbursement, EAP resources, and caregiver and mental health support. last updated 26 week of 2026