{"id":711485,"url":"https://alion.io/job/wilsonelser-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":684922,"name":"Wilson Elser Moskowitz Edelman & Dicker","domain":"wilsonelser.com","url":"https://alion.io/company/wilsonelser","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":14,"ghost_share":0.071,"stale_share":0.357,"repost_share":0.071,"time_to_fill_p50_days":83,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure Data Factory","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Databricks","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PHP","optional":false},{"name":"Power Apps","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"React.js","optional":false},{"name":"SDL","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-08-24T14:55:25Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-08T02:23:35Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"At Wilson Elser, we are redefining what it means to work at a national law firm. With more than 1,400 attorneys across 46 offices nationwide, we are recognized among the top 100 law firms by The American Lawyer and ranked #30 in the National Law Journal’s survey of the nation’s largest law firms.\nOur continued success is built on a culture of collaboration, innovation, client service, and mutual respect. We are committed to fostering an environment where employees are empowered to grow their careers, contribute meaningfully, and thrive professionally.\nThe Position\nWe are seeking a highly skilled Senior Application Security Engineer to help establish and mature our secure software development and DevSecOps program. This role will serve as the bridge between Information Security and Application Development, partnering closely with engineering leadership to embed security into the software development lifecycle without slowing innovation or delivery.\nThis individual will work across internally developed applications, cloud-native platforms, CI/CD pipelines, integrations, low-code/no-code platforms, and Azure-hosted services. The ideal candidate combines hands-on application security expertise with practical development experience and strong collaboration skills.\nThis position will report to the Information Security team with a strong dotted-line partnership into Application Development and Engineering leadership.\nKey Responsibilities\nApplication Security & Secure Development Lifecycle (SDL)\nLead and mature the organization’s secure software development lifecycle (SSDLC) program\nPartner with developers and engineering leadership to embed secure-by-design principles into development workflows\nPerform application security reviews, threat modeling, and secure architecture assessments\nReview source code and assist development teams in identifying and remediating vulnerabilities\nEstablish secure development standards, policies, and reusable secure coding templates\nBuild and maintain “paved road” secure development patterns for common technologies and frameworks\nDevSecOps & CI/CD Security\nIntegrate and optimize security tooling within Azure DevOps pipelines\nManage and improve SAST, DAST, SCA, API scanning, and IaC scanning processes\nEnhance automated security testing within CI/CD workflows\nDevelop processes for vulnerability ingestion, triage, prioritization, remediation tracking, and reporting\nBuild dashboards and metrics around application security posture and remediation SLAs\nCreate or customize scripts and integrations to normalize findings across multiple security tools\nSecurity Tooling & Vulnerability Management\nAdminister and optimize tools such as:\nSnyk\nSonarQube\nAzure DevOps\nPowerShell scanning tools\nAdditional open source or commercial AppSec tooling as needed\nEvaluate gaps in existing security tooling coverage and recommend improvements\nTune scanners, suppress false positives appropriately, and create custom detection rules where necessary\nPartner with development teams to manage security exceptions and remediation timelines\nCloud & Platform Security\nCollaborate with cloud and infrastructure teams to secure Azure-hosted applications and services\nSupport security reviews involving:\nAzure PaaS services\nContainers\nDatabricks\nMongoDB\nData Lake environments\nAzure Data Factory\nPower Platform / Power Apps\nAssist with securing low-code/no-code platforms and related governance processes\nSecurity Culture & Developer Enablement\nEstablish and support a Security Champions program within engineering teams\nDeliver developer-focused training, workshops, lunch-and-learns, and secure coding guidance\nServe as a trusted advisor and mentor to developers on secure coding and DevSecOps practices\nPromote a collaborative, enablement-focused security culture\nQualifications\n5+ years of experience in Application Security, Product Security, DevSecOps, or Software Engineering\nHands-on experience securing CI/CD pipelines and modern development workflows\nExperience working directly with development teams in agile environments\nStrong understanding of:\nSecure coding principles\nOWASP Top 10\nSecure SDLC practices\nThreat modeling\nVulnerability management\nExperience with at least several of the following technologies:\nAzure DevOps\nAzure cloud services\nSnyk\nSonarQube\nContainers/Kubernetes\nPowerShell\nPython\n.NET\nJavaScript\nReact\nPHP\nExperience integrating security tooling into CI/CD pipelines\nAbility to analyze scanner results and distinguish meaningful risk from low-value findings\nStrong scripting and automation skills\nExcellent communication and collaboration skills\nWilson Elser offers a competitive salary and benefits package designed to support our attorneys both professionally and personally.\nA variety of factors are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands, other business and organizational needs, and other factors permitted by law. Final salary wages offered may be outside of this range based on other reasons and individual circumstances. This position is considered full-time and therefore qualifies for benefits including 401(k) retirement savings plan, medical, dental, vision, disability, and life insurance. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. \nSalary Range:\n$150,000—$180,000 USD\nWhy Should You Apply? \nBenefits: Outstanding benefits package, including 401k match and generous PTO plan\nCareer Growth: Ample opportunities for professional development and advancement\n Employee Perks: Access to corporate discount plans and other benefits\nWilson Elser welcomes submissions of candidates for our open positions exclusively from recruitment agencies with an active, signed fee agreement who have been granted access to a position through our dedicated Recruitment Agency Portal. We are unable to consider submissions from recruitment agencies without a current (dated as of 7/1/2024) agreement in place. We appreciate your understanding. For collaboration inquiries or to establish an agreement, please contact us at .\nWilson Elser is committed to a collegial work environment in which all individuals are treated with respect and dignity. It is the Firm's policy that employment will be based on merit, qualifications, and competence. Further, employment decisions will be made without regard to an applicants race, color, age, sex, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation or preference, gender identity, physical or mental disability, status as a victim of domestic violence, sex offenses, or stalking, past or present service in the uniformed services or application or obligation to serve in the uniformed services, or any other characteristic protected by law. \nWilson Elser endeavors to make the Wilson Elser website accessible to any and all users. You may review our Accessibility Policy here.\nCalifornia Residents may review our CCPA notice for applicants and employees here.\n\nWilson Elser participates in the federal E-Verify program. With respect to all new hires, we provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee’s Form I-9 to confirm work authorization.\nPlease review the official posters for detailed information regarding your rights and protections\n Download the E-Verify Participation Poster (English & Spanish)\n\n Download the Right to Work Poster (English & Spanish)\n\n#ZR","description_format":"text","description_chars":7644,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance","Professional development","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Legal Services"],"lifecycle":[{"event":"open","at":"2026-09-11T04:56:33Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":47,"band":"ok","label":"Likely open","p_open":1,"p_active":0.785,"p_room":0.6,"age_days":74,"expected_fill_days":83,"reasons":["conf:4","win:late","crowd:"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/wilsonelser-senior-application-security-engineer","json_url":"https://alion.io/job/wilsonelser-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-08T02:48:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5986,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684922},"rest":"https://alion.io/mcp/rest/get_company?id=684922"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwilsonelser-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwilsonelser-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwilsonelser-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wilsonelser-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwilsonelser-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":711485}},{"tool":"search_jobs","arguments":{"company":"wilsonelser.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":711485},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}