The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field
Responsible for integrating security throughout the software development lifecycle, performing threat modeling, secure design reviews, managing application security testing programs, and guiding remediation efforts.
Responsibilities
Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
Manage and support application security testing programs, including SAST, DAST, SCA, secret scanning, and related security technologies.
Requirements
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
Nice to have: Experience within a SaaS, cloud-native, software development, or technology organization
Nice to have: Experience serving as an application security engineer within a mature Product Security or DevSecOps program
Nice to have: Experience with software development languages such as Java, C#, JavaScript, TypeScript, Python, Go
The Senior Security Engineer will play a key role in strengthening application, infrastructure, and product security through continuous offensive testing and hands-on remediation.
Compensation
Annual base salary ranging from $180,000 to $195,000 USD.
Responsibilities
Plan and conduct red team, purple team, and application penetration testing activities aligned with the MITRE ATT&CK framework
Perform continuous security testing of TypeScript web applications and APIs, identifying vulnerabilities such as broken authorization, IDOR, injection, SSRF, prototype pollution, XSS, and insecure deserialization
Test newly released production features under clearly defined rules of engagement
Assess identity and access management systems, including OIDC/OAuth, SSO, session management, and authorization controls
Build and operate AI-driven offensive security workflows
This fully remote leadership role offers the opportunity to shape and lead a comprehensive Product Vulnerability Management program across multiple products and services.
Compensation
Estimated base salary of $175,000–$200,000, depending on experience, skills, business needs, and location.
Responsibilities
Design and implement the Product Vulnerability Management operating model, covering people, processes, and technology while applying agile best practices.
Lead and develop the Vulnerability Management team, fostering a collaborative, high-performing culture and supporting recruitment, technical screening, and professional growth.
Partner with Product Security and Product Development teams to integrate security into development processes and enable developers to address vulnerabilities effectively.
Oversee product security scanning tools and capabilities, including SAST, SCA, DAST, and CSPM solutions.
Manage the vulnerability disclosure program and processes for responding to security inquiries from customers and researchers.
Requirements
Bachelor's degree in Computer Science, Information Security, Business Administration, or a related discipline
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM
Translate assessment findings into prioritized security roadmaps
Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage
Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM
Translate assessment findings into prioritized security roadmaps
Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage
Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt
Requirements
Bachelor's degree or equivalent professional experience
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM, reviewing repositories, development pipelines, and cloud environments.
Translate assessment findings into prioritized security roadmaps.
Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage.
Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management.
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt.
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM
Translate assessment findings into prioritized security roadmaps
Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage
Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects, focusing on ISO/IEC 27001 preparation.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM
Translate assessment findings into prioritized security roadmaps
Develop and maintain security policies and procedures
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA)
Design and implement a standardized Secure Software Development Lifecycle (Secure SDLC) based on OWASP ASVS and OWASP SAMM
The Cybersecurity Consultant will play a hands-on role in strengthening organizational security and embedding secure development practices across software projects.
Compensation
Negotiable hourly compensation based on skills and professional experience.
Responsibilities
Conduct security maturity assessments using frameworks such as OWASP SAMM
Translate assessment findings into prioritized security roadmaps
Develop and maintain security policies and procedures covering access control, acceptable use, secure development, incident response, vendor management, and AI tool usage
Maintain security backlogs, risk registers, and performance metrics, providing monthly progress reports to management
Configure and enforce Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across email, Git hosting, cloud platforms, CI/CD systems, and Passbolt
Senior Application Security EngineerNewPowerSchool Group LLC · Plano, US
Senior Security Engineer, Offensive Security & RemediationNewJobgether · Remote, US