Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and
Jobs in United States
Application And Web Security Specialist in United States
2,567 active opportunities · Updated October 2026
Showing
15 jobs
Explore current application and web security specialist jobs across United States. Filter by work mode, employment type, experience, department, date posted and distance.
Application Software Engineer, Phantom Works (Experienced or Senior) Company: The Boeing Company The Boeing Company is looking for an Application Software Engineer (Experience or Senior ) to join the Phantom Works Open Architecture Systems Integrated Software (OASIS) Solutions team located in Berkeley, MO. This position will focus on supporting the Boeing Defense, Space & Security (BDS) Software Engineering organization. Phantom Works is where imagination meets engineering excellence — a place where bold ideas are shaped to transform the future of defense. Driven by curiosity and relentless problem-solving, our team pushes boundaries across aerospace, autonomy, emerging technologies and advanced materials to create breakthrough capabilities that keep people and warfighters safe, and missions successful. With a culture of collaboration, integrity, and rigorous testing, Phantom Works transforms daring concepts into trusted, operational solutions that inspire confidence and expand what’s possible in the skies and beyond. The selected team member will enjoy working collaboratively with others, has commitment to customer satisfaction and process improvement, and is successful working in a multi-contract/multi-program environment. The Application Software Engineer will support the development of solutions to a wide range of complex problems that require ingenuity and innovation. The ideal candidate should be adaptable to new development environments and eager to work with and learn new technologies. Position Responsibilities: Designs, develops, tests, and maintains embedded software throughout the end-to-end lifecycle that meets industry, customer, safety, and regulation standards. Reviews, analy
We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Job Description Summary The Application Developer is responsible for designing, building, and maintaining automation solutions that support claims processing workflows within the Rocket Automation platform. This role partners closely with business, governance, and operations teams to translate defined requirements into scalable, reliable automation capabilities. The Developer serves as a technical expert, ensuring solutions are built to enterprise standards and operate efficiently in production, while supporting continuous improvement of automation performance and stability. Key Responsibilities Design, develop, and enhance automation solutions based on clearly defined business requirements and processing rules Translate functional requirements into technical logic, ensuring accuracy and scalability of automation workflows Perform unit testing, system testing, and validation of automation solutions prior to deployment Support production deployments, including release readiness, implementation, and post-production monitoring Troubleshoot and resolve defects, errors, and performance issues in production automation processes Maintain and enhance existing automation solutions to improve efficiency, accuracy, and throughput Monitor automation performance and system health, identifying opportunities for optimization and i
At Render, we’re building the modern cloud platform for developers creating AI-native, full-stack, multi-service applications. Our mission is to eliminate the tradeoff between the power of hyperscalers and the simplicity of developer-friendly platforms—so teams can ship fast, scale reliably, and focus on their product, not infrastructure. Unlike complex hyperscalers or ephemeral edge/serverless solutions, Render offers a developer-first experience with persistent compute, dynamic autoscaling, built-in orchestration, and observability, allowing teams to launch, scale, and manage real-world applications without writing infrastructure code or managing servers. Whether you're building LLM-powered applications, scalable SaaS products, or async processing pipelines, Render empowers teams to move fast and scale confidently from MVP to millions of users. Our platform is trusted by over 6.5 million developers worldwide and continues to grow rapidly. In February 2026, we raised an additional $100M in Series C financing, bringing our total funding to $257M, to accelerate our vision of making cloud infrastructure both powerful and intuitive—designed for the speed of modern AI development. We’re a diverse and talented team that values craft, velocity, and user experience. If you’re excited to help shape the future of the intelligent cloud and empower developers everywhere, we’d love to hear from you. Applying to Render We're seeking candidates who possess high integrity, humility, and an insatiable drive to learn. Through reasoned discussions and continuous feedback, we strive to improve both individually and collectively. We foster an environment of mutual trust and respect, empowering effective debate to achieve the best outcomes for our customers and team. We especially encourage members of underrepresented groups in the tech community to apply and understand that not all successful candidates will meet each requirement listed. Our interview process is unique to each role, an
Location: Remote Orca is expanding into new product verticals, bringing a new class of regulated assets on-chain with the compliance infrastructure and liquidity primitives to make them actually work. Our ambition reaches beyond becoming the leading provider of financial primitives in crypto—we aim to reshape the foundation of finance itself. If you are someone who is tired of just working another job and wants to build something meaningful, then we invite you to join our team. We’re always looking for talented individuals to join our growing team. If you think your skills can contribute to Orca's mission, but don’t see a specific role that matches your expertise in our current open positions, we’d love to hear from you. By submitting your resume here, you’ll be considered for future opportunities that align with your background and interests. If there’s a potential fit for an existing or upcoming opportunity, our team will get in touch. While we’d love to respond to everyone, we’re unfortunately unable to provide individual updates on all open applications. What Orca offers Competitive Salary. Bonus AND Token allocation. Flexible work schedule. Home office stipend. Wellness stipend. Opportunity to co-work with the team multiple times a year from at different locations around the world, fully covered by Orca. Option to work remotely or from Orca’s office in New York City. Paid subscriptions to GitHub Copilot, ChatGPT, or other tools that make you more productive. About: https://orca.so Twitter: https://x.com/orca_so Discord: https://discord.orca.so Podcast: https://orcapod.orca.so Orca is an equal opportunity employer.
As a Staff Application Security Engineer at Datadog, you'll set technical direction for how we approach application security at scale. You'll define the frameworks, methodologies, and architectural patterns that engineering teams across Datadog adopt and apply independently. You're the person others come to when they don't know how to make something secure, and you reliably have an answer. You'll be a point of contact for our most complex security programs, often spanning multiple teams and multiple quarters. The role requires both depth (going very deep on specific problems when needed) and breadth (recognizing patterns across systems and drawing connections that others miss). Partnering closely with teams inside and outside the security org is key to success. You'll help shape the AppSec roadmap and make the case for where investment should go. We use our own platform. Logs, Dashboards, Service Catalog, and APM aren't just things we sell: they're tools the AppSec team uses to build security services, measure adoption of secure defaults, and communicate risk across the organization. AI is also part of the picture. Engineering at Datadog increasingly uses agentic tooling throughout the development lifecycle, and many of the products we ship to customers now include AI-powered features. Both create new attack surfaces, and defining our strategy for addressing them is part of this role. If using Datadog to observe Datadog's own security posture, building impactful tooling, and shaping how we secure AI-powered systems sounds like the right kind of problem, this role is worth a close look. What You’ll Do: Define and drive security standards and secure-by-default solutions, serving as the Application Security subject matter expert. Build security tooling and automation that scales security practices across engineering teams, and implement robust security observability to support our threat detection team with meaningful, actionable security signals. Lead threat mod
The Senior Enterprise Applications Analyst, Procurement supports the evolution, implementation, and integrity of TaylorMade's Oracle ERP solutions across global procurement and supply chain operations. This role provides functional expertise and day-to-day operational support for Procure-to-Pay (P2P) processes, while partnering with business stakeholders to drive measurable process improvement and align system capabilities with strategic objectives. The analyst supports enterprise initiatives including system upgrades, automation, and cloud migration planning. Essential Functions and Key Responsibilities: Provide day-to-day functional support for Oracle Procurement, including troubleshooting issues and ensuring uninterrupted requisitioning, purchasing, and supplier management operations. Configure and maintain Oracle Procurement setups, including organizational structures, Approval Management Engine (AME), document types, supplier configurations, item and category hierarchies, iProcurement, and profile options. Gather, analyze, and document business requirements using Oracle AIM methodology, and translate them into detailed functional specifications for development. Evaluate existing business processes, identify gaps and improvement opportunities, and recommend Oracle standard solutions that deliver measurable business value, including cost savings, efficiency improvements, and return on investment (ROI). Develop, coordinate, and execute functional, system integration (SIT), user acceptance (UAT), and regression testing activities; perform root cause analysis and resolution of production issues. Support and troubleshoot integrations between Oracl
Job Details: Job Description: Intel is shaping the future of technology to help create a better future for the entire world. Our work in pushing forward fields like AI, analytics, and cloud-to-edge technology is at the heart of countless innovations. With a career at Intel, you'll have the opportunity to use technology to power major breakthroughs and create enhancements that improve our everyday quality of life. Join us and help make the future more wonderful for everyone. Intel's Foundry Automation (IFA) team is hiring a Software Application Development Engineer. As part of our team, you will partner with end users in Fab Manufacturing and Engineering to deliver innovative solutions specially crafted for the ever-changing needs of our highly automated factories. To integrate these solutions, you will work closely with our Software Development teams and execute testing, implementation, troubleshooting and documentation of business processes. You will work at the intersection of software engineering and advanced manufacturing, collaborating with cross-functional teams to analyze business processes, gather requirements, implement software releases, and drive continuous improvement. This is a unique opportunity to make a direct and meaningful impact on Intel's 24/7 manufacturing capabilities while growing your technical expertise in a dynamic, fast-paced environment. Key Responsibilities: Collaborate with internal customers and partners to identify emerging data and business needs, and translate those needs into effective software solutions Analyze existing manufacturing processes and procedures to identify opportunities for optimization and improvement Gather and document business and technical requirements from stakeholders across Fab Manufacturing and Engineering Execute the im
Job Details: Job Description: Logic Technology Development (LTD) is looking for an experienced individual interested in becoming a Process Integration and Yield Technician. As a Process Integration and Yield Technician, you will assist engineering with route creation, modification, and troubleshooting of the flow of material through our factory using in-house software. In this role your primary responsibilities may include (but are not limited to): Provide assistance to engineering in collecting and recording data during the development of next-generation technology. You will use database report analysis in order to assist with route modification and out-of-control material disposition. Helping with the execution of experiments during development. - You will Utilize a practical application of science, math, and engineering to a wide range of problems. Willing but not limited to work in a lab environment. In addition, the candidate must be willing to: Work in compressed work week schedule consisting of three twelve-hour days in a row with one additional day every other week. Lift 25 lbs. repeatedly while sometimes being on their feet for an extended period. Periodically gowning up to go into the factory to assist with wafer movement activities. A successful candidate should also exhibit the following behavioral traits: Effective communication skills and flexibility to work well in a diverse team environment, multitasking skills and the ability to adjust to rapidly changing priorities, critical thinking and analytical problem-solving skills and strong attention to detail, proactive mindset, able to work and think independently with little or no supervision. Qualifications: You must possess the below minimum qualifications to be initially considered for this position. Preferred qualificatio
Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi
About Ema Ema is building the world’s leading Agentic AI platform to transform enterprise productivity. We enable organizations to delegate repetitive tasks to Ema, the Universal AI Employee, delivering 10x gains in workforce efficiency, across functions. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs. We are backed by industry leading investors including Accel, Naspers/Prosus, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production — we ship real systems that run real business processes at scale. At Ema, we build AI Employees that operate inside the enterprise. Healthcare is where the bar is highest: the output has to be accurate, auditable, and clinically sound. We're opening a part-time role focused on agent measurement and improvement. You'll instrument how our healthcare AI Employees perform in production, identify where quality breaks down, and design the experiments that close the gap — partnering with clinical experts to ensure improvements translate into better patient outcomes, not just better metrics. We're looking for strong analytical judgment (Python, agent lead development), comfort operating with incomplete information, and genuine interest in the healthcare domain. Clinical experience is valued but not required. This engagement is structured as a paid internship or contract engagement, with weekly syncs in our Bay Area office. Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits. Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applic
Lead Design and Analysis Engineer (Electrical Systems Design) Company: The Boeing Company Boeing is currently hiring for a Lead Design and Analysis Engineer located in Berkeley, MO to be a part of the MQ-25 Electrical and Equipment Installation team. The MQ-25 Stingray is a new autonomous, unmanned carrier based refueling air vehicle. The selected candidate will be a part of aviation history by helping our Navy customer productization Autonomous Carrier landing, takeoff and refueling capabilities. The MQ-25 program is currently building the Engineering and Manufacturing Development (EMD) vehicles for the Navy. Additional work is under way for the beginning of the Low Rate Initial Production (LRIP) program for additional vehicles. The MQ-25 Electrical & Equipment team is responsible for the power architecture & design, electrical equipment technical management, electrical installation design, wire harness design, and integrating avionics and other equipment into the vehicle. This role will be focused on the power architecture & design. Position Responsibilities: Leads work with customers to develop and document complex electronic and electrical system requirements. Leads and coordinates work to analyze and translate requirements into system architecture, hardware and software designs and interface specifications. Leads work to test and validate to ensure system designs meet operational and functional requirements. Researches technology advances for potential application to company business needs. Makes recommendations for technology investments. This position is expected to be 100% onsite. The selected candidate will be require
Electronic System Design and Analysis Engineer (Experienced or Senior) Company: The Boeing Company The Boeing Test Operations and Engineering (TO&E) team in Berkeley , Missouri is seeking an Electronic System Design and Analysis Engineer to join our Instrumentation Installation Design group to support all major programs in the St. Louis area. We are currently hiring for a broad range of experience levels including Experienced and Senior Electronic System Design and Analysis Engineers. Position Responsibilities: Electrical Design & Testing AC and DC power applications Assisting shop with build information Reading electrical drawings/schematics Troubleshooting Electrical component/wiring faults Production Functional and Environmental Acceptance Testing Designing new test sets for various weapon and aircraft electronics Performs system tests to verify operational and functional requirements Supports resolution of product integration issues and production anomalies Researches basic technologies for potential application to company business needs Assists in monitoring suppliers' performance to ensure compliance with requirements Develops or modifies basic hardware and software designs based on defined requirements Assists with the development and documentation of electronic and electrical system requirements This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options. Basic Qualifications (Required Skill/Experience): <
$105.1K – $161.8K/yr
Embedded Firmware and Software Engineer Description - This role is responsible for driving design, development, and debugging of embedded software/firmware for hardware, ensuring efficient and reliable operation. The role collaborates with hardware engineers to integrate software and firmware with hardware components, ensuring seamless communication and functionality. The role works closely with software developers, hardware engineers, quality assurance, and product managers to deliver high-quality products. Responsibilities Owns the preparation and creation of instructional technical manuscripts for firmware operation. Allocates resources to complete programming projects, and designing detailed plans to ensure firmware is functioning properly. Designs enhancements, updates, and programming changes for portions and subsystems of firmware, including DSP, embedded code, EFI drivers, EFI applications and BIOS/UEFI. Analyzes design and determines coding, programming, and integration activities required based on general objectives and knowledge of overall architecture of product or solution. Writes and executes complete testing plans, protocols, and documentation for assigned portion of application; creates solutions for issues with code and integrates into application architecture. Leads a project team of other software firmware engineers and internal and outsourced development partners to develop reliable, cost effective and high quality solutions for assigned systems portion or subsystem. Collaborates and communicates with management, internal, and outsourced development partners regarding firmware design status, project progress, and issue resolution. Represents the software firmware engineering team for all phases of larger and more-complex development projects, from microarchitecture design thro
From $272K/yr
We’re looking for a Senior Staff Software Engineer with deep experience in GenAI/ML to join Datadog’s Application Performance Monitoring (APM) team. APM is a product which provides deep visibility into applications, enabling users to identify performance bottlenecks, troubleshoot issues, and optimize services. With distributed tracing, profiling, out-of-the-box dashboards, and seamless correlation with other telemetry data, Datadog APM provides some of the deepest and most structured visibility into the health and performance of applications. This context sets us up for an opportunity to be the world leaders in agentic investigations and incident troubleshooting. You’ll act as a technical leader within the APM group, focused on agentic workflows. You’ll lead efforts to design, train, evaluate, and deploy GenAI/ML models at scale. We’re looking for a product-minded ML engineer with strong technical expertise, excellent communication skills, and a track record of driving impactful initiatives end to end. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Serve as the technical owner for GenAI initiatives within APM, leading design, development, and deployment of ML/AI-powered features across multiple teams. Guide long-term strategy and technical direction for GenAI workflows across APM and related products. Build and benchmark GenAI/ML models using state-of-the-art techniques. Contribute to Datadog’s broader senior engineering community through thought leadership and collaboration on company-wide initiatives. Collaborate with cross-functional teams to build automated investigation and triaging tools. Influence product direction by bringing a strong product mindset to your work, always advocating for the end user. Guide teams through ambiguity, sc
Other cities to consider
More places hiring for this role
Get new application and web security specialist jobs in United States by email
Daily job updates · Unsubscribe anytime