{"id":2455326,"url":"https://alion.io/job/civicplus-application-security-engineer","title":"Application Security Engineer","company":{"id":179382,"name":"CivicPlus","domain":"civicplus.com","url":"https://alion.io/company/civicplus","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jobvite","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":91500,"max":135500,"currency":"USD","period":"year","gross":null,"usd_annual":135500},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C#","optional":true},{"name":"CI/CD","optional":true},{"name":"JavaScript","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-13T15:54:55Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T23:42:48Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nYour Impact\nAs an Application Security Engineer you will help embed security across CivicPlus's software development lifecycle, leading application security testing and vulnerability remediation to protect the products local governments and residents rely on.\nAbout CivicPlus\nAt CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we're empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.\nWhat You'll Do\nAs an Application Security Engineer, you will:\nPerform security code reviews, threat modeling, and architecture reviews across all development projects as part of a secure Software Development Lifecycle (SDLC).\nCollaborate with development teams to integrate secure design, secure coding standards, and security controls across the SDLC.\nIdentify, track, and validate vulnerabilities and security defects from security testing and scanning, partnering with development teams to prioritize remediation within compliance timeline requirements.\nCoordinate external, independent penetration testing of production environments.\nLead application security testing, including static, dynamic, and interactive application security testing (SAST, DAST, IAST).\nServe as a subject matter expert on application security vulnerabilities (such as the OWASP Top 10) and emerging threats.\nWhat We're Looking For\nWe know that excellent candidates come from diverse backgrounds. Even if you don't meet 100% of the listed requirements, we encourage you to apply!\nPreferred Qualifications:\n3-7 years of experience in application security, secure development, penetration testing, or a related field.\nHands-on experience with application/security testing tooling (SAST, DAST, and/or IAST).\nExperience integrating secure design principles into change management, code review, CI/CD pipelines, and secure development operations.\nSecurity+, GSEC, GSSP, or equivalent certification.\nBachelor's degree in Computer Science, Cybersecurity, Information Security, Information Systems, or a related field (preferred).\nFamiliarity with secure coding practices across multiple languages (such as C#, Go, Java, JavaScript, or Python) and knowledge of cloud-native and SaaS application environments.\nAI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality.\nDemonstrated ability to effectively use AI tools to enhance productivity and outcomes.\nCompensation and Benefits\nEstimated Salary Grade Range: $91,500 - $135,500\nAnticipated Hiring Range: $90k - $100k.\nThe actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.\n\n Benefits: Comprehensive health insurance, dental insurance, vision insurance, Flexible Time Off, 401(k) plan, and more.\nOur Hiring Process\nIntroductory call with Talent Acquisition\nInterview with the Hiring Manager\nPanel Interview with CivicPlus team members, including an interview project activity\nOffer\nNote: The process may vary slightly depending on the role.\nAdditional Information\nCivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.\nThis position will remain open until October 7, 2026 at 4pm CT. We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team.\nAt CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience-while keeping human judgment, collaboration, and accountability at the center of what we do.\nEqual Opportunity Commitment\nCivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process.","description_format":"text","description_chars":4384,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible time off","Health insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Government"],"lifecycle":[{"event":"open","at":"2026-10-13T15:54:55Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 2","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":2,"median_offered_wage_usd":120833,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:2","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":135500,"is_top_pay":true},"html_url":"https://alion.io/job/civicplus-application-security-engineer","json_url":"https://alion.io/job/civicplus-application-security-engineer.json","meta":{"generated_at":"2026-10-15T00:36:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1552,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179382},"rest":"https://alion.io/mcp/rest/get_company?id=179382"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcivicplus-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcivicplus-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcivicplus-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/civicplus-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcivicplus-application-security-engineer"}]}