Application Security Engineer-68257

Function Cloud & Data Engineering Our Company We’re Hitachi Digital Services, a global digital solutions and transformation business with a bold vision of our world’s potential. We’re people-centric and here to power good. Every day, we future-proof urban spaces, conserve natural resources, protect rainforests, and save lives. This is a world where innovation, technology, and deep expertise come together to take our company and customers from what’s now to what’s next. We make it happen through the power of acceleration. Imagine the sheer breadth of talent it takes to bring a better tomorrow closer to today. We don’t expect you to ‘fit’ every requirement – your life experience, character, perspective, and passion for achieving great things in the world are equally as important to us. Job description Application Security Engineer Company: Hitachi Digital Services Practice: HARC Security Location: Dallas, TX (Onsite) Experience: 2+ Years Role Overview Hitachi Digital Services is seeking an Application Security Engineer to support application security, DevSecOps, secure software development, and AI-enabled security initiatives. The ideal candidate should have hands-on experience with application security testing, CI/CD security, vulnerability management, secure code reviews, and OWASP-based security practices. Key Responsibilities Perform application security assessments for web, API, cloud-native, and AI-enabled applications. Conduct secure code reviews and support vulnerability remediation efforts. Integrate security controls into CI/CD pipelines and DevSecOps workflows. Analyze findings from SAST, DAST, SCA, container security, and secret scanning tools. Participate in threat modeling and application security design reviews. Provide guidance on secure coding practices, OWASP Top 10, and OWASP API Security Top 10. Collaborate with development teams to improve security posture and adopt secure-by-design principles. Required Skills Minimum 2 years of experience in Application Security, DevSecOps, Secure Development, or Software Security. Strong understanding of: OWASP Top 10 Secure SDLC Threat Modeling Secure Code Review API Security Fundamentals Familiarity with CI/CD platforms such as: Azure DevOps GitHub Actions Jenkins GitLab CI/CD Hands-on experience with one or more: SAST: Checkmarx, Veracode, Fortify, SonarQube DAST: Burp Suite, OWASP ZAP SCA: Snyk, Mend, Black Duck Knowledge of containers and Kubernetes security fundamentals. Basic scripting/programming skills (Python, PowerShell, JavaScript, Java, C#, etc.). Preferred Qualifications Experience with Azure and/or AWS cloud environments. Knowledge of DevSecOps automation and Infrastructure-as-Code security (Terraform, Bicep, ARM, CloudFormation). Experience securing containerized and cloud-native applications. Familiarity with AI-assisted development tools (GitHub Copilot, Amazon Q, Cursor, etc.). Understanding of AI/LLM security concepts, including prompt injection, sensitive data exposure, model misuse, and OWASP Top 10 for LLM Applications. Experience with vulnerability management and application security governance programs. Preferred Certifications Security+ SSCP CySA+ CEH CSSLP AZ-500 AWS Certified Security – Specialty Relevant Application Security, DevSecOps, or Cloud Security certifications Skills Summary Application Security • DevSecOps • Secure SDLC • OWASP Top 10 • OWASP API Security Top 10 • AI Security • Secure Code Review • Threat Modeling • SAST • DAST • SCA • CI/CD Security • Container Security • Kubernetes Security • Cloud Security (Azure/AWS) • Vulnerability Management • Security Automation Job Level: P10 Focus Areas: Application Security, DevSecOps, AI Security, Secure SDLC, CI/CD Security, Vulnerability Management, Container & Kubernetes Security, Cloud Security (Azure/AWS). About us We’re a global, team of innovators. Together, we harness engineering excellence and passion to co-create meaningful solutions to complex challenges. We turn organizations into data-driven leaders that can make a positive impact on their industries and society. If you believe that innovation can bring a better tomorrow closer to today, this is the place for you. Fostering innovation through diverse perspectives Hitachi is a global company operating across a wide range of industries and regions. One of the things that sets Hitachi apart is the diversity of our business and people, which drives our innovation and growth. We are committed to building an inclusive culture based on mutual respect and merit-based systems. We believe that when people feel valued, heard, and safe to express themselves, they do their best work. How we look after you We help take care of your today and tomorrow with industry-leading benefits, support, and services that look after your holistic health and wellbeing. We’re also champions of life balance and offer flexible arrangements that work for you (role and location dependent). We’re always looking for new ways of working that bring out our best, which leads to unexpected ideas. So here, you’ll experience a sense of belonging, and discover autonomy, freedom, and ownership as you work alongside talented people you enjoy sharing knowledge with. We’re proud to say we’re an equal opportunity employer and welcome all applicants for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, age, disability status or any other protected characteristic. Should you need reasonable accommodations during the recruitment process, please let us know so that we can do our best to set you up for success.