Cybersecurity
Application Security / DevSecOps career guide
Builds security into software: code review, testing tools in pipelines and developer guidance.
Job titles
- Application Security Engineer
- DevSecOps Engineer
- Product Security Engineer
Skills employers ask for
- Secure code review
- Threat modeling
- SAST
- DAST
- Software composition analysis
- CI/CD security
- API security
- Secrets management
- Web application security
- Authentication & authorization
- Container security
- Burp Suite
- OWASP ZAP
- Semgrep
- SonarQube
- Snyk
- Trivy
- Dependabot
Certifications for Application Security / DevSecOps roles
- GWAPT
- CSSLP
- OSWE
- BSCP
- CASE
- Security+
- CDP
Recent Application Security / DevSecOps postings
Get hired as a Application Security / DevSecOps
Match your resume to live postings, tailor it to each one, and practice for the certifications they ask for.
Create a free accountFrequently asked questions
What does a Application Security / DevSecOps do?
Builds security into software: code review, testing tools in pipelines and developer guidance.
What skills does a Application Security / DevSecOps need?
Common skills in Application Security / DevSecOps postings include Secure code review, Threat modeling, SAST, DAST, Software composition analysis, CI/CD security, API security, Secrets management, Web application security, Authentication & authorization.
Which certifications help for Application Security / DevSecOps roles?
Employers often ask for GWAPT, CSSLP, OSWE, BSCP, CASE, Security+.
How many Application Security / DevSecOps jobs are open?
ReconHire lists about 34 recent postings that match Application Security / DevSecOps titles, and 13 of them are remote.
How much does a Application Security / DevSecOps make?
Among 20 recent postings that list pay, the middle half falls between $158k and $230k a year, with a median near $218k. Pay varies by city, experience and employer.