[Remote] NFL - Junior Application Security Engineer
Note: The job is a remote job and is open to candidates in USA. Algoworks is hiring for the NFL Information Security Office, which protects applications used and developed across the League. The Junior Application Security Engineer will support application security standards, secure SDLC adoption, security testing, vulnerability triage and remediation, application and API inventories, automation, and communication of security risks.
Responsibilities
- Support application security policy enforcement and secure SDLC adoption across NFL applications
- Assist with SAST, DAST, SCA, API security testing, mobile application security testing, and penetration testing coordination
- Triage, route, and track findings from application security tools and related AppSec sources
- Help maintain inventories of NFL applications, APIs, ownership data, and business criticality context
- Serve as a first-line support contact for AppSec-related questions from IT and business lines
- Assist application teams with threat modeling, architecture diagrams, and security testing expectations
- Communicate findings in a clear, risk-based manner for application owners, technical teams, Risk, and Governance
- Support vulnerability remediation tracking, re-scans, validation, and reporting
- Create or maintain scripts and lightweight automation to improve AppSec workflows
- Participate in vulnerability disclosure, application assessments, and offensive security activities under senior team guidance
Skills
- Foundational understanding of application security, secure coding, vulnerability management, and SDLC concepts
- Familiarity with scripting or programming languages such as Python, Go, Ruby, JavaScript, TypeScript, PowerShell, or Bash
- Basic understanding of networking, HTTP, APIs, operating systems, and web application architecture
- Familiarity with common AppSec testing concepts such as SAST, SCA, DAST, API testing, mobile testing, and penetration testing
- Ability to analyze technical findings and communicate clearly with technical and non-technical stakeholders
- Analytical skills, curiosity, accountability, and ability to complete tasks with minimal supervision
- Experience with application scanners, web proxies, vulnerability management tools, source code repositories, or CI/CD pipelines
- Exposure to cloud-based applications, APIs, containers, or modern software delivery environments
- Experience creating scripts or automation to support security workflows
- Coursework, internship, certification, lab, or project experience in cybersecurity, software engineering, computer science, or a related technical field
Company Overview
Company H1B Sponsorship