Support customer-facing security engagements, learning to run standardized assessments and turn technical risks into clear, actionable guidance.
Locations (3)
Seattle, Washington, United States
Bellevue, Washington, United States
Chicago, Illinois, United States
Compensation
The typical base salary range for this position is $75,200 - $82,800 annually. There is a different range applicable to specific work locations. In California and New York, and select cities in the metropolitan areas of Boston, Chicago, Seattle, and Washington DC, the base pay range for this role in those locations is $90,600 - $90,600 per year.
Responsibilities
Help execute standardized security assessment methodologies for customer implementations, covering web, API, cloud, and AI-enabled applications.
Assist with post-sale and deployment security configuration reviews, including identity and access management (IAM) posture and integration risks.
Senior Application Security Engineer
Blue Cross and Blue Shield of Nebraska · Posted Nov 6, 2026
Own and operate application security tooling, including SAST, DAST, and software composition analysis, ensuring tools are tuned, effective, and aligned to business risk.
Embed application security into CI/CD pipelines and development workflows to support shift‑left security while minimizing developer friction.
Perform secure code reviews and validate vulnerabilities for exploitability, impact, and remediation feasibility.
Define and maintain secure coding standards, guidance, and reusable security patterns for development teams.
Establish guardrails and review expectations for AI‑assisted and AI‑generated code, reducing unowned and unmanaged application risk.
Help produce customer-facing deliverables, such as assessment reports, gap analyses, and configuration checklists, with clear findings, risk ratings, and remediation recommendations.
Support threat modeling, architecture reviews, and secure code reviews as part of engagements.
Join customer and Professional Services delivery conversations to build consulting and communication skills.
Requirements
Bachelor's in Information Systems/MIS with a technical lean (e.g., CS coursework or security certifications)
Computer Science with a strong interest in consulting and hands-on customer delivery
Nice to have: OWASP Top 10
Nice to have: familiarity with web, API, and cloud architectures
Application Security EngineerNintendo · Redmond, US
Associate Security Consultant – PSSASalesforce · Seattle, US+2 more