Application security and adjacent roles only. Each listing links to the original posting.
226 open roles. Updated October 19, 2026.
Newest 50 of 226 roles
The Hartford
“The Hartford emphasizes responsible management and protection of personal information, adopting reasonable physical,...”
Revolut
“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”
Revolut
“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”
DKSH
“DKSH's publicly stated AppSec approach is assurance across the full software development lifecycle, combining...”
CarGurus
“CarGurus uses organizational, architectural, and operational security measures to protect applications, infrastructure,...”
AbbVie
“"embed security throughout the software development lifecycle"; "protects AbbVieâs patients, data, and brand".”
Athene
“On developer enablement and self-service, aiming to 'make the secure path the easy path.”
Macquarie Group
“Help engineers create more secure software, integrate security throughout the SDLC, and create secure development...”
Omnissa
“Omnissa's AppSec mission is defined by its Security Development Lifecycle (SDL), a set of processes, tools, and...”
Randstad Enterprise
“The public company statement defines security around safeguarding customer data, security best practices, SOC 2 Type II...”
Coca-Cola HBC
“The AppSec philosophy focuses on advancing strategy through 'cultural influence' and 'multi-functional initiatives.”
AbbVie
“"embed security throughout the software development lifecycle"; "protects AbbVieâs patients, data, and brand".”
Revolut
“Revolut's AppSec philosophy is "developer-first" and explicitly "shift-left," prioritizing low-noise automation and...”
Fragomen
“"Manage SDLC initiatives around Fragomen's DAST processes".”
Swift
“Help financial institutions ensure their defences. The company's oversight objectives focus on risk identification,...”
AT&T
“"We defend the AT&T network with a multi-layered approach"– AT&T Sustainability: Cybersecurity (”
MUFG
“Participates from early stages of systems planning and design, with a focus on threat intelligence and centralized...”
PIMCO
“Developer enablement, aiming for security to be an enabler, not a blocker, for innovation.”
Clio
“Ensure software security by finding and fixing vulnerabilities.”
Clio
“Ensure software security by finding and fixing vulnerabilities.”
Resmed
“ResMed job posting explicitly states the role is "enabling developers to build secure applications.”
Resmed
“ResMed job posting explicitly states the role is "enabling developers to build secure applications.”
MUFG
“Participates from early stages of systems planning and design, with a focus on threat intelligence and centralized...”
Tokio Marine HCC
“Shaping and influencing enterprise application security strategy, conducting threat modeling and application...”
Prudential Financial
“Being "secure by design"and enabling self-service for developers.”
Qualys
“Embedding security early and continuously in the development lifecycle, fostering DevSecOps collaboration, and...”
Nasdaq
“Nasdaq's Boardvantage is "protected by multiple layers of security, including application security".”
Clio
“Ensure software security by finding and fixing vulnerabilities.”
Cadence
“Applying continuous security assessments during development operations and implementing a 'shift-left' security...”
Packsize
“A chief information (CIO) and chief information security (CISO) officer.”
Itron, Inc.
“Itron states a strong commitment to security, asserting they care about it even more than their customers, and that...”
Qualys
“Embedding security early and continuously in the development lifecycle, fostering DevSecOps collaboration, and...”
GM Financial
“Develop and maintain technical security requirements, standards, and documentation.”
Pearson
“Pearson's Application Security team is responsible for the security of Pearson learning management applications.”
S&P Global
“A proactive, "shift-left"approach, integrating security throughout the SDLC and fostering collaboration with developers.”
Trimble Inc.
“"Trimble Secure Development Life Cycle (TSDLC)"”
Sony Pictures Entertainment
“Embedding application security principles throughout all phases of technology development and deployment, promoting...”
Bessemer Trust
“Comprehensive information security strategy incorporating industry best practices, rigorous corporate policies,...”
Computacenter
“Computacenter's stated AppSec mission is that "Application Security Testing (AST) is part of the software development...”
Computacenter
“Computacenter's stated AppSec mission is that "Application Security Testing (AST) is part of the software development...”
Space Telescope Science Institute
“Embedding application security practices into our cloud software delivery lifecycle, partnering with development teams...”
Cadence
“Applying continuous security assessments during development operations and implementing a 'shift-left' security...”
Scotiabank
“Its Application Security Operation team has global accountability and is expanding its scope to cover Cloud Native...”
RBC
“Safeguarding hybrid-cloud environments and views cybersecurity as more than just an IT concern.”
M&T Bank
“M&T Bank's Application Security (AppSec) mission involves "capturing and refining information security requirements".”
Swift
“Help financial institutions ensure their defences. The company's oversight objectives focus on risk identification,...”
Trimble Inc.
“"Trimble Secure Development Life Cycle (TSDLC)"”
Trimble Inc.
“"Trimble Secure Development Life Cycle (TSDLC)"”
Swift
“Help financial institutions ensure their defences. The company's oversight objectives focus on risk identification,...”
Halliburton
“Halliburton aims to ensure security is embedded by design across the full software development lifecycle.”
Application security engineers find and fix weaknesses in software before it ships. Most of the work happens inside engineering: reviewing pull requests for risky code, threat modeling new features, tuning scanners so developers see fewer false alarms, and helping teams fix what the scanners find. Titles vary more than the work does.
Look for application security engineer, software security engineer and senior or staff versions of both. Some roles here are titled plain "Security Engineer" but describe application security work in the posting.
Postings here often name a programming language you should be able to code in, and many mention static analysis, dependency scanning or the OWASP Top 10. The tools section below shows which scanners and platforms public sources tie to these companies.