The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
$0.00-$0.00 Hourly
This is the base pay range that an applicant can expect to make upon hire.
Pay within this range will vary based upon relevant experience, skills, and education among other factors.
Responsibilities
Run Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) on application code and interfaces
Do Software Composition Analysis (SCA) to find vulnerable or outdated third-party and open-source components
Help with fuzz testing, configuration reviews, and checks for common weakness types
Triage findings, remove false positives, and score severity with the Common Vulnerability Scoring System (CVSS)
Build and maintain threat models with established methods such as STRIDE, including data flow diagrams and trust boundaries
Champion secure development, application security, and the secure adoption of AI throughout the organization, ensuring secure patterns, automation, and compliance across cloud and on-prem environments.
Responsibilities
Architect security systems and designs to help secure MX’s platform and products, including AI and LLM-powered features, both in the cloud and on-prem/colo.
Mature the MX Security Architecture review program and processes, with review criteria for both traditional applications and AI systems.
Automate application security tooling by building it into CI/CD processes, using AI-assisted analysis to triage findings, reduce false positives, and suggest fixes to developers.
Ensure that software is developed securely with resilient architectures and patterns, including guardrails for AI features that handle customer or financial data.
Partner with the Platform and DevOps teams to implement appropriate security architecture through threat models, tooling, and automation for Kubernetes, AWS/GCP, and the AI services and models running on them.
Requirements
Bachelor's degree in Computer Science, Information Security, or a related field
Nice to have: Master's degree or PhD in Computer Science, Information Security, or a related field
Nice to have: Hands-on experience securing applications that use LLMs, ML models, or AI agents
Nice to have: Knowledge of financial industry regulations such as SOC 2 and PCI
The Software Engineer II contributes to building and operating best-in-class authentication products such as ID Check, Token Authentication Service, and Token Authentication Framework at the intersection of Site Reliability Engineering, platform engineering, and release engineering.
Compensation
O'Fallon, Missouri: $92,000 - $147,000 USD
Responsibilities
Design, develop, and own Java-based backend services and REST APIs in a distributed architecture.
Build and enhance UI applications using Angular and Node.js
Own end-to-end delivery including solution design, development, testing, deployment, configuration, documentation, and operational support
Participate in technical design sessions, architectural reviews, and solution planning to help deliver scalable, resilient, secure, and maintainable software solutions.
Ensure high-quality code through peer code reviews, automated testing, and adherence to engineering standards and best practices.
Senior Application Security EngineerNewPowerSchool Group LLC · Plano, US
Product Security ArchitectMX Technologies, Inc. · Lehi, US
Software Engineer IIMastercard · O'Fallon, US