Application Security Engineer (OWASP 10 and GCP)

TITLE Application Security Engineer (OWASP 10mand GCP)
LOCATION: Las Vegas, NV
HYBRID-4 DAYS ONSITE IN THE OFFICE
NO C2C 3RD PARTY VENDORS!!! ONLY LOCAL CANDIDATES IN NY/NJ METRO AREA

JOB DESCRIPTION:

Our client is looking for an experienced Cloud & Application Security Engineer to design, implement, validate, and operate security controls across our cloud infrastructure, applications, and software delivery pipelines. Individual will partner with DevOps, various Engineering, and Security teams across the organization to build secure-by-default platforms that enable developers while reducing organizational risk. This role requires strong hands-on experience across cloud security, application security, networking, vulnerability management, AI security, and automation.

Responsibilities:

· Design, implement, and mature secure cloud architectures across AWS, Azure, and GCP, with a primary focus on GCP.

· Develop, audit, and harden cloud infrastructure, including IAM, networking, organization policies, logging, and Terraform-based Infrastructure-as-Code.

· Provide security architecture reviews and guidance for cloud applications, APIs, infrastructure, DevOps, and AI-assisted development.

· Perform application security assessments, secure code reviews, and hands-on testing of web applications, APIs, and cloud services using automated and manual techniques to identify vulnerabilities and drive remediation.

· Identify, prioritize, and remediate cloud and application vulnerabilities, including critical and zero-day threats.

· Lead evaluations, proof-of-concepts, and implementation of cloud and application security technologies.

· Secure AI platforms and AI-assisted development by implementing appropriate security controls and reviewing AI-assisted applications for security risks.

· Partner with Security Operations to improve cloud detection, monitoring, incident response, and security visibility.

Required Experience: (MUST)

· Bachelor's degree in computer science, Cybersecurity, a related field, or equivalent practical experience.

· 5+ years of hands-on experience in cybersecurity, cloud engineering, DevOps, application security, or related discipline.

· Experience securing enterprise cloud environments across AWS, Azure, and/or GCP, including Kubernetes.

· Strong understanding of cloud architecture, IAM, networking, cloud security controls, and Infrastructure-as-Code.

· Experience integrating security into CI/CD pipelines using Terraform and modern DevOps platforms.

· Proficiency in Python, PowerShell, Bash, Go, or a similar language, or demonstrated ability to leverage AI-assisted engineering tools to develop automation and security solutions.

· Hands-on experience with Wiz or a comparable CSPM/CNAPP platform.

· Experience with application security, including secure SDLC, threat modeling, secure code reviews, SAST, DAST, SCA, secret scanning, vulnerability management, remediation, and web application security testing.

· Strong understanding of web application security, REST APIs, authentication (OAuth/OIDC/JWT), and OWASP Top 10.

· Familiarity with AI security concepts and securing enterprise AI platforms or AI-assisted applications.

· Security certifications (e.g., CISSP, CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer,