{"id":4216990,"url":"https://alion.io/job/powerschool-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":20238,"name":"PowerSchool","domain":"powerschool.com","url":"https://alion.io/company/powerschool","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0.667,"time_to_fill_p50_days":12,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C#","optional":true},{"name":"Go","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"OWASP SAMM","optional":true},{"name":"Python","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-11-13T03:04:11Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T03:04:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nAbout PowerSchool At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem-from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.\nJob Overview\nThe Application Security Engineer is responsible for integrating security throughout the software development lifecycle to reduce risk and improve the security of PowerSchool's products and services. Reporting to the Senior Manager of Product Security, this role partners closely with engineering, architecture, product, and DevOps teams to identify security requirements, perform threat modeling, conduct secure design reviews, manage application security testing programs, and guide remediation efforts. The Application Security Engineer serves as a trusted advisor to development teams, helping ensure that security is built into applications from design through deployment while supporting secure development practices, developer education, and continuous improvement of the organization's product security program.\nResponsibilities\nDescription\nAs an application security engineer, you are responsible for identifying potential threats and vulnerabilities in applications, designing secure software systems, and implementing robust security measures.\nYour day-to-day job will consist of:\nPartner with development, architecture, product, and DevOps teams to integrate security throughout the software development lifecycle.\nPerform threat modeling exercises to identify potential attack vectors, security risks, and required security controls for new and existing applications.\nConduct secure architecture and design reviews to identify security weaknesses and recommend effective mitigations early in the development process.\nProvide security guidance and consultation to engineering teams regarding secure coding practices, application security risks, and security requirements.\nManage and support application security testing programs, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), secret scanning, and related security technologies.\nAnalyze, validate, prioritize, and communicate application security findings to development teams and other stakeholders.\nWork with engineering teams to develop remediation plans and track security issues through resolution.\nEstablish, maintain, and continuously improve application security standards, secure coding requirements, and secure development lifecycle processes.\nEvaluate third-party software components, open-source dependencies, and software supply chain risks to identify potential security concerns.\nSupport software bill of materials (SBOM) initiatives and software supply chain security activities.\nDevelop security requirements, security patterns, and implementation guidance for web applications, APIs, cloud-native applications, and supporting services.\nCollaborate with Offensive Security Engineers to review penetration test findings and drive corrective actions where appropriate.\nDesign and deliver application security training, awareness materials, and developer enablement programs.\nSupport security champions and other security advocate programs within engineering organizations.\nQualifications\nMinimum Qualifications\n5+ years of experience in application security, software security, secure software development, DevSecOps, software engineering, or a related discipline.\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering, or a related field; or equivalent combination of education, training, and experience.\nExperience performing threat modeling, secure design reviews, and application security assessments.\nExperience identifying and mitigating common web application and API vulnerabilities, including those described by the OWASP Top 10 and OWASP API Security Top 10.\nExperience supporting application security testing technologies, including SAST, DAST, SCA, secret scanning, and related security tooling.\nStrong understanding of secure coding principles, software architecture, and secure development practices.\nKnowledge of authentication, authorization, session management, cryptography, API security, and software supply chain security concepts.\nExperience working with software development teams to remediate security findings and implement secure solutions.\nFamiliarity with modern software development methodologies, CI/CD pipelines, and DevOps practices.\nKnowledge of cloud technologies and security concepts within AWS and/or Microsoft Azure environments.\nStrong analytical, communication, presentation, and stakeholder management skills.\nAbility to communicate technical security concepts effectively to developers, engineers, and business stakeholders.\nPreferred Qualifications\nExperience working within a SaaS, cloud-native, software development, or technology organization.\nExperience serving as an application security engineer within a mature Product Security or DevSecOps program.\nExperience with software development languages such as Java, C#, JavaScript, TypeScript, Python, Go, or similar technologies.\nExperience developing secure development lifecycle (SDLC) processes, standards, and governance frameworks.\nExperience conducting manual secure code reviews and identifying security weaknesses in application source code.\nExperience supporting software supply chain security initiatives, including SBOM generation, dependency management, and open-source risk management.\nExperience with container security, Kubernetes security, cloud-native application security, and API security.\nFamiliarity with threat intelligence, penetration testing, offensive security practices, and vulnerability management programs.\nExperience implementing or supporting security champions programs and developer security training initiatives.\nFamiliarity with NIST Secure Software Development Framework (SSDF), OWASP SAMM, or similar software security frameworks.\nIndustry certifications such as CISSP, CSSLP, GWAPT, GWEB, OSWE, Security+, Azure Security Engineer Associate, AWS Security Specialty, or equivalent.\nCompensation & Benefits\nCompensation & Benefits\nAlong with our highly market competitive base compensation, PowerSchool offers the following benefits:\nComprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)\n\nFlexible Spending Accounts and Health Savings Accounts\n\nShort-Term Disability and Long-Term Disability\n\nComprehensive 401(k) plan\n\nGenerous Parental Leave\n\nUnrestricted paid time off (known as Discretionary Time Off - DTO)\n\nWellness Program, including ClassPass & Employee Assistance Program\n\nTuition Reimbursement\n\nOptional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage\n\nEEO Commitment\nEEO Commitment\nPowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing .","description_format":"text","description_chars":7745,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Insurance coverage","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","EdTech Platforms","Learning Management Systems"],"lifecycle":[{"event":"open","at":"2026-11-13T03:04:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7","filings_12m":7,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:1","win:early"],"computed_at":"2026-11-13T04:08:56Z"},"pay":null,"html_url":"https://alion.io/job/powerschool-senior-application-security-engineer","json_url":"https://alion.io/job/powerschool-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-13T04:08:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8834,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20238},"rest":"https://alion.io/mcp/rest/get_company?id=20238"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpowerschool-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpowerschool-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpowerschool-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/powerschool-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpowerschool-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4216990}},{"tool":"search_jobs","arguments":{"company":"powerschool.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4216990},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}