Application Security Engineer
OneStream · United States
About the role
An application security engineer on OneStream's information security team, working remotely to keep its financial software platform secure. The engineer triages and validates SAST, SCA and DAST findings by real-world risk, gives developers practical fixes, joins design reviews and threat modelling, tunes security tools in CI/CD, reviews third-party dependencies, and uses AI and scripting to deduplicate findings, open tickets and report trends.
It asks for a computing degree with five years in application security, development or DevSecOps (or a master's and one year), knowledge of OWASP Top 10 vulnerability classes, and scripting; C# and .NET experience is a strong plus.