
Application Security Engineer
VGS is hiring an Application Security Engineer to design and drive a secure SDLC, automate security guardrails in CI/CD (GitHub/GitLab), operate and triage a private bug bounty program, conduct threat models and code reviews for Java and Python microservices, and grow security capability through training and a Security Champions network. The role lists 3–5+ years of AppSec or full stack development experience and includes experience with SAST/DAST/SCA tools and vulnerability/program management.