应用安全工程师
AppSec Engineer
AppSec 工程师 – 远程办公
Bright Vision Technologies 是一家技术咨询和软件开发公司,为美国各地的客户提供云计算、人工智能、数据和企业解决方案。
加入一家知名且备受尊敬的组织,这是一个绝佳的机会,提供巨大的职业发展潜能。
职位名称:AppSec 工程师
工作地点:100% 远程(美国)
职位类型:全职,直接 W2
薪资范围:每年 80,000–100,000 美元
所需经验:6 年以上
签证支持:美国公民、绿卡持有者、EAD 持有者以及 H-1B 转移候选人欢迎申请。我们无法为该职位的新 H-1B 签证申请提供支持。
职位简介
我们正在寻找一名 AppSec 工程师,将安全嵌入软件开发生命周期,与工程团队合作设计安全系统,识别漏洞,并降低我们应用组合中的风险。该职位结合了实战性的进攻性和防御性技能,以及强大的沟通和协作能力,帮助开发团队高效构建安全的软件,而不是拖慢他们的进度。理想的候选人具备深厚的技术安全专业知识、扎实的软件工程基础,并有成功交付安全改进措施的经验,这些措施在生产环境中显著降低了风险。
必备资格
· 计算机科学、网络安全或相关领域的学士学位。
- 五年或以上应用安全或安全工程经验。
- 对 OWASP Top 10、常见漏洞类别和现代利用模式有深入了解。
- 至少在两种主要编程语言中具备代码审查的实际经验。
- 对 SAST、DAST、SCA 和 CI/CD 集成安全工具有深入熟悉。
- 对身份验证、授权和密码学原语有深刻理解。
- 具备云安全和现代基础设施控制经验。
- 与技术及非技术受众沟通能力强。
- 精通至少一种用于工具开发和自动化的编程语言。
- 在敏捷环境中与工程团队紧密合作的经验。
优先考虑的资格
· 行业认证,如 OSCP、OSCE、GWAPT 或 CISSP。
- 具备进攻性安全工具和红队操作经验。
- 漏洞赏金经验、公开的 CVE 或开源安全贡献。
- 了解 AI/LLM 应用安全相关事项。
- 接触过受监管行业,具有严格合规要求的经验。
查看英文原文
AppSec Engineer – Remote
Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.
Job Title: AppSec Engineer
Location: 100% Remote (U.S.)
Position Type: Full-time, Direct W2
Salary Range: $80,000–$100,000 Annually
Experience Required: 6+ years
Sponsorship: U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. We are unable to sponsor new H-1B visa petitions for this position.
Job Summary
We are looking for an AppSec Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio. The role blends hands-on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down. The ideal candidate brings deep technical security expertise, strong software engineering fundamentals, and a track record of shipping security improvements that meaningfully reduce risk in production.
Required Qualifications
· Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
- Five or more years of application security or security engineering experience.
- Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns.
- Hands-on experience performing code review across at least two major languages.
- Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling.
- Strong understanding of authentication, authorization, and cryptographic primitives.
- Experience with cloud security and modern infrastructure controls.
- Strong communication skills with technical and non-technical audiences.
- Proficiency in at least one programming language for tooling and automation.
- Experience working closely with engineering teams in an Agile environment.
Preferred Qualifications
· Industry certifications such as OSCP, OSCE, GWAPT, or CISSP.
- Experience with offensive security tooling and red-team operations.
- Bug bounty experience, public CVEs, or open-source security contributions.
- Familiarity with AI/LLM application security considerations.
- Exposure to regulated industries with strict compliance requirements.
How to Apply
Would you like to know more about this opportunity? For immediate consideration, please send your resume to
Vision Technologies is an Equal Opportunity Employer.Equal Employment Opportunity (EEO) Statement
Bright Vision Technologies (BV Teck) is committed to equal employment opportunity (EEO) for all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other protected status as defined by applicable federal, state, or local laws. This commitment extends to all aspects of employment, including recruitment, hiring, training, compensation, promotion, transfer, leaves of absence, termination, layoffs, and recall.
BV Teck expressly prohibits any form of workplace harassment or discrimination. Any improper interference with employees' ability to perform their job duties may result in disciplinary action up to and including termination of employment.
Originally posted on Himalayas