Mid Level Application Security Engineer Jobs
Mid level application security engineer jobs go to engineers ready to own security assessments end to end, drive remediation decisions with limited oversight, and mentor junior teammates on secure coding practices. Roles run across Technology & Software, Science & Research, and Retail, with 82% offering remote or hybrid flexibility, and employers like Anthropic, BRAIN, and Meijer hiring at this level now.
Find JobsOverview
Open roles21
Top stateCalifornia
Top employerAnthropic
Top citySan Francisco, CA
Work type65% Hybrid
Top industryTechnology
Showing 5 of 21+ Mid Level Application Security Engineer jobs
Senior Application Security Engineer
We won't show you this job again
New 13h ago
PowerSchool Group
Senior Application Security Engineer
Plano, Texas
New 13h ago
Staff Application Security Engineer
We won't show you this job again
Added 1w ago
Vestwell
Staff Application Security Engineer
Austin, Texas
Added 1w ago
Application Security Engineer
We won't show you this job again
Added 3w ago
Omnissa
Application Security Engineer
Atlanta, Georgia
Added 3w ago
Application Security Engineer
We won't show you this job again
Added 1mo ago
Purpose Brands
Application Security Engineer
Boca Raton, Florida
Added 1mo ago
Application Security Engineer
We won't show you this job again
Added 2mo ago
Amazon.com
Application Security Engineer
Seattle, Washington
Added 2mo ago
New 13h ago
Senior Application Security Engineer
PowerSchool Group·Plano, Texas
Job functions:
5+ yrs exp.
Bachelor's degree in information technology
Full Time
1,001-5,000 employees
Job Description
Overview:
EEO Commitment:
About PowerSchool
At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.
At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.
Job Overview
The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services. Reporting to the Senior Manager of Product Security, this role partners closely with engineering, architecture, product, and DevOps teams to identify security requirements, perform threat modeling, conduct secure design reviews, manage application security testing programs, and guide remediation efforts. The Application Security Engineer serves as a trusted advisor to development teams, helping ensure that security is built into applications from design through deployment while supporting secure development practices, developer education, and continuous improvement of the organization's product security program.
Responsibilities:
Description
As an application security engineer, you are responsible for identifying potential threats and vulnerabilities in applications, designing secure software systems, and implementing robust security measures.
Your day-to-day job will consist of:
- Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
- Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
- Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
- Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
- Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
- Analyze, validate, prioritize, and communicate application security findings to development teams and other stakeholders.
- Work with engineering teams to develop remediation plans and track security issues through resolution.
- Establish, maintain, and continuously improve application security standards, secure coding requirements, and secure development lifecycle processes.
- Evaluate third-party software components, open-source dependencies, and software supply chain risks to identify potential security concerns.
- Support software bill of materials (SBOM) initiatives and software supply chain security activities.
- Develop security requirements, security patterns, and implementation guidance for web applications, APIs, cloud-native applications, and supporting services.
- Collaborate with Offensive Security Engineers to review penetration test findings and drive corrective actions where appropriate.
- Design and deliver application security training, awareness materials, and developer enablement programs. Support security champions and other security advocate programs within engineering organizations.
Minimum Qualifications
- 5+ years of experience in application security, software security, secure software development, DevSecOps, software engineering, or a related discipline.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
- Experience performing threat modeling, secure design reviews, and application security assessments.
- Experience identifying and mitigating common web application and API vulnerabilities, including those described by the OWASP Top 10 and OWASP API Security Top 10.
- Experience supporting application security testing technologies, including SAST, DAST, SCA, secret scanning, and related security tooling.
- Strong understanding of secure coding principles, software architecture, and secure development practices.
- Knowledge of authentication, authorization, session management, cryptography, API security, and software supply chain security concepts.
- Experience working with software development teams to remediate security findings and implement secure solutions.
- Familiarity with modern software development methodologies, CI/CD pipelines, and DevOps practices.
- Knowledge of cloud technologies and security concepts within AWS and/or Microsoft Azure environments.
- Strong analytical, communication, presentation, and stakeholder management skills.
-
Ability to communicate technical security concepts effectively to developers, engineers, and business stakeholders.
Preferred Qualifications
- Experience working within a SaaS, cloud-native, software development, or technology organization.
- Experience serving as an application security engineer within a mature Product Security or DevSecOps program.
- Experience with software development languages such as Java, C#, JavaScript, TypeScript, Python, Go, or similar technologies.
- Experience developing secure development lifecycle (SDLC) processes, standards, and governance frameworks.
- Experience conducting manual secure code reviews and identifying security weaknesses in application source code.
- Experience supporting software supply chain security initiatives, including SBOM generation, dependency management, and open-source risk management.
- Experience with container security, Kubernetes security, cloud-native application security, and API security.
- Familiarity with threat intelligence, penetration testing, offensive security practices, and vulnerability management programs.
- Experience implementing or supporting security champions programs and developer security training initiatives.
- Familiarity with NIST Secure Software Development Framework (SSDF), OWASP SAMM, or similar software security frameworks. Industry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSWE, Security+, Azure Security Engineer Associate, AWS Security Specialty, or equivalent.
Compensation & Benefits
Along with our highly market competitive base compensation, PowerSchool offers the following benefits:
- Comprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)
- Flexible Spending Accounts and Health Savings Accounts
- Short-Term Disability and Long-Term Disability
- Comprehensive 401(k) plan
- Generous Parental Leave
- Unrestricted paid time off (known as Discretionary Time Off - DTO)
- Wellness Program, including ClassPass & Employee Assistance Program
- Tuition Reimbursement
- Optional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage
EEO Commitment:
EEO Commitment
PowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing accommodations@powerschool.com.
PowerSchool Group
Senior Application Security Engineer
Plano, Texas
New 13h ago1,001-5,000 employees
Job functions:
5+ yrs exp.
Bachelor's degree in information technology
Full Time
Job Description
Overview:
EEO Commitment:
About PowerSchool
At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.
At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.
Job Overview
The Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services. Reporting to the Senior Manager of Product Security, this role partners closely with engineering, architecture, product, and DevOps teams to identify security requirements, perform threat modeling, conduct secure design reviews, manage application security testing programs, and guide remediation efforts. The Application Security Engineer serves as a trusted advisor to development teams, helping ensure that security is built into applications from design through deployment while supporting secure development practices, developer education, and continuous improvement of the organization's product security program.
Responsibilities:
Description
As an application security engineer, you are responsible for identifying potential threats and vulnerabilities in applications, designing secure software systems, and implementing robust security measures.
Your day-to-day job will consist of:
- Partner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.
- Perform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.
- Conduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.
- Provide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.
- Manage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.
- Analyze, validate, prioritize, and communicate application security findings to development teams and other stakeholders.
- Work with engineering teams to develop remediation plans and track security issues through resolution.
- Establish, maintain, and continuously improve application security standards, secure coding requirements, and secure development lifecycle processes.
- Evaluate third-party software components, open-source dependencies, and software supply chain risks to identify potential security concerns.
- Support software bill of materials (SBOM) initiatives and software supply chain security activities.
- Develop security requirements, security patterns, and implementation guidance for web applications, APIs, cloud-native applications, and supporting services.
- Collaborate with Offensive Security Engineers to review penetration test findings and drive corrective actions where appropriate.
- Design and deliver application security training, awareness materials, and developer enablement programs. Support security champions and other security advocate programs within engineering organizations.
Minimum Qualifications
- 5+ years of experience in application security, software security, secure software development, DevSecOps, software engineering, or a related discipline.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.
- Experience performing threat modeling, secure design reviews, and application security assessments.
- Experience identifying and mitigating common web application and API vulnerabilities, including those described by the OWASP Top 10 and OWASP API Security Top 10.
- Experience supporting application security testing technologies, including SAST, DAST, SCA, secret scanning, and related security tooling.
- Strong understanding of secure coding principles, software architecture, and secure development practices.
- Knowledge of authentication, authorization, session management, cryptography, API security, and software supply chain security concepts.
- Experience working with software development teams to remediate security findings and implement secure solutions.
- Familiarity with modern software development methodologies, CI/CD pipelines, and DevOps practices.
- Knowledge of cloud technologies and security concepts within AWS and/or Microsoft Azure environments.
- Strong analytical, communication, presentation, and stakeholder management skills.
-
Ability to communicate technical security concepts effectively to developers, engineers, and business stakeholders.
Preferred Qualifications
- Experience working within a SaaS, cloud-native, software development, or technology organization.
- Experience serving as an application security engineer within a mature Product Security or DevSecOps program.
- Experience with software development languages such as Java, C#, JavaScript, TypeScript, Python, Go, or similar technologies.
- Experience developing secure development lifecycle (SDLC) processes, standards, and governance frameworks.
- Experience conducting manual secure code reviews and identifying security weaknesses in application source code.
- Experience supporting software supply chain security initiatives, including SBOM generation, dependency management, and open-source risk management.
- Experience with container security, Kubernetes security, cloud-native application security, and API security.
- Familiarity with threat intelligence, penetration testing, offensive security practices, and vulnerability management programs.
- Experience implementing or supporting security champions programs and developer security training initiatives.
- Familiarity with NIST Secure Software Development Framework (SSDF), OWASP SAMM, or similar software security frameworks. Industry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSWE, Security+, Azure Security Engineer Associate, AWS Security Specialty, or equivalent.
Compensation & Benefits
Along with our highly market competitive base compensation, PowerSchool offers the following benefits:
- Comprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)
- Flexible Spending Accounts and Health Savings Accounts
- Short-Term Disability and Long-Term Disability
- Comprehensive 401(k) plan
- Generous Parental Leave
- Unrestricted paid time off (known as Discretionary Time Off - DTO)
- Wellness Program, including ClassPass & Employee Assistance Program
- Tuition Reimbursement
- Optional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage
EEO Commitment:
EEO Commitment
PowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing accommodations@powerschool.com.
See All 21 Mid Level Application Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Application Security Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software10
- Science & Research4
- Retail1
- Insurance1
- Agriculture & Farming1
Mid Level Application Security Engineer Jobs: Frequently Asked Questions
How do I get a mid level application security engineer job?
Position your existing experience around ownership, not just participation. Highlight security features or assessments you led, vulnerabilities you found and remediated, and any secure development lifecycle work you drove independently. Tailor your resume to show depth in one or two specializations, such as penetration testing or threat modeling, rather than listing every tool you have touched. Concrete outcomes, like reducing critical findings or improving deployment security, land interviews at this level.
Which companies hire mid level application security engineers?
Companies hiring mid level application security engineers right now include Anthropic, BRAIN, and Meijer, based on current listings on Migrate Mate as of November 2026. Hiring at this level covers large technology firms, financial services companies, healthcare organizations, and defense contractors, all of which need engineers who can own security programs with limited supervision.
Are there remote mid level application security engineer jobs?
Yes, and the share is significant for this role. About 82% of mid level application security engineer openings are remote or hybrid as of November 2026, reflecting how much of the work, code review, threat modeling, and vulnerability analysis, can be done effectively without being on site. Fully on-site roles tend to cluster in regulated industries like defense and government contracting.
How do I move up to a mid level application security engineer role?
Growth into mid level comes from taking on projects rather than tasks. Early in your career, focus on deepening one domain, such as web application security or cloud security posture, until you can work through problems independently. Seek out opportunities to own a full assessment or lead a security initiative, document the measurable outcomes, and build familiarity with secure development workflows inside real product teams. That pattern of demonstrated ownership is what hiring managers look for when evaluating mid level candidates.
Which industries hire the most mid level application security engineers?
Mid Level application security engineer roles concentrate in Technology & Software, Science & Research, and Retail, based on current listings on Migrate Mate as of November 2026. These sectors handle sensitive user data, face strict compliance requirements, or build software at scale, all of which create sustained demand for engineers who can identify and remediate application risks without constant oversight.