ZipRecruiter

Log In

1

Application Security Engineer Jobs in Pennsylvania

Wawa, Inc.

Application Security Engineer

Media, PA · On-site

$58.50 - $78/hr

Application Security Engineer Location: Corporate Department: Information Technology Job Summary: The Application Security Engineer is responsible for operating, supporting, maintaining, and ...

Wawa

Application Security Engineer

Wawa, PA

$57.25 - $76.25/hr

Application Security Engineer Location: Corporate Department: Information Technology Job Summary: The Application Security Engineer is responsible for operating, supporting, maintaining, and ...

D and H Distributing Co

Application Security Engineer

Harrisburg, PA · On-site

$58 - $77.50/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Application Security Engineer D&H is growing! Join 100+ year old Employee-Owned technology distributor, offering end-to-end solutions for today's resellers, retailers, and the clients they serve ...

D&H Distributing

Application Security Engineer

Harrisburg, PA · On-site

$58 - $77.50/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Application Security Engineer D&H is growing! Join 100+ year old Employee-Owned technology distributor, offering end-to-end solutions for today's resellers, retailers, and the clients they serve ...

D&H Distributing

Application Security Engineer

Harrisburg, PA · On-site

$58 - $77.50/hr

They are seeking an Application Security Engineer to ensure the reliability and security of systems and applications, with responsibilities including assessing application security and maintaining ...

D&H

Application Security Engineer

Harrisburg, PA · On-site

$58 - $77.50/hr

... application security. This includes an understanding of the security software development lifecycle (SDLC), as well as being proficient in at least one programming language. Essential Duties and ...

EnerSys

Application Security Engineer (REMOTE)

Reading, PA · Remote

$117K - $146K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Job Purpose The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers ...

EnerSys

Application Security Engineer (REMOTE)

Reading, PA · Remote

$117K - $146K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Job Purpose The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers ...

EnerSys Delaware, Inc.

Application Security Engineer (REMOTE)

PA · On-site +1

$117K - $146K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Job Purpose The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers ...

Sonsoft Inc

Application Security

Exton, PA

$56.75 - $75.75/hr

Conduct Security Code Review, Vulnerability Assessment and Consult Product Development Team to secure applications * Understanding and familiarity with common code review methods and standards such ...

CGI Inc.

Senior Security Engineer

Dallas, PA · On-site

$110K - $152K/yr

  • Retirement

  • PTO

Review and validate application security fix approaches proposed by Java and .NET developers ... specifically Spring Security misconfigurations, endpoint exposure vulnerabilities, OAuth ...

Wolfe, LLC

Software Security Engineer

Pittsburgh, PA · On-site

$110K - $120K/yr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

As a Software/Application Security Engineer, you'll work hands-on alongside developers and DevOps engineers to build security into how we ship software - reviewing code, harden the AI agents, MCP ...

next page

Showing results 1-20

All JobsApplication Security Engineer JobsApplication Security Engineer Jobs in Pennsylvania

Application Security Engineer information

See Pennsylvania salary details

$29

$66

$96

How much do application security engineer jobs pay per hour?

As of Aug 19, 2026, the average hourly pay for application security engineer in Pennsylvania is $66.56, according to ZipRecruiter salary data. Most workers in this role earn between $56.63 and $75.67 per hour, depending on experience, location, and employer.

What does an application security engineer do?

An application security engineer is responsible for ensuring the secure function of software application programs. For this career, you must have advanced training in cybersecurity and familiarity with multiple computer programming languages. Your main job duty is to evaluate lines of programming code to make sure a given application is safe from cyber-attack. You perform penetration testing to see if outside sources can "hack" into the application. You also do threat modeling and security code reviews of programming done by other application programmers.

What does an application security engineer do?

An Application Security Engineer is responsible for identifying and mitigating security vulnerabilities in software applications throughout their development lifecycle. They work closely with developers to ensure secure coding practices, conduct security assessments and code reviews, and implement tools for threat detection and prevention. Their primary goal is to protect applications from threats such as data breaches, unauthorized access, and other forms of cyber attacks. They also stay updated on the latest security trends and compliance requirements to keep applications safe.

What are the key skills and qualifications needed to thrive as an application security engineer, and why are they important?

To thrive as an Application Security Engineer, you need a solid background in software development, cybersecurity fundamentals, and vulnerability assessment, often supported by a degree in computer science or a related field. Familiarity with tools such as static and dynamic application security testing (SAST/DAST), penetration testing frameworks, and relevant certifications like CISSP or CEH is common. Attention to detail, problem-solving abilities, and strong communication skills help you effectively identify risks and collaborate with development teams. These skills are crucial for safeguarding applications against evolving threats and ensuring secure software delivery.

What are some common challenges faced by application security engineers when integrating security into the software development lifecycle?

Application Security Engineers often encounter challenges such as balancing security requirements with development speed, ensuring all team members understand secure coding practices, and keeping up with evolving threats. They frequently work closely with developers, DevOps, and QA teams to embed security controls without disrupting workflows. Overcoming these challenges requires strong communication skills, a deep understanding of both security and software development, and the ability to advocate for security as a shared responsibility across the organization.

What is the difference between Application Security Engineer vs Security Analyst?

AspectApplication Security EngineerSecurity Analyst
CertificationsCEH, CISSP, OSCPCISSP, Security+
Work EnvironmentDevelops security measures, reviews code, tests applicationsMonitors security systems, investigates incidents, analyzes threats
Industry UsageTech companies, software firms, organizations with strong app focusBroad sectors including finance, healthcare, government

Application Security Engineers focus on securing software applications through code review, vulnerability testing, and implementing security measures. Security Analysts monitor and analyze security threats, respond to incidents, and maintain security systems. While both roles require security certifications and work in security-focused environments, Application Security Engineers are more involved in the development and testing of secure applications, whereas Security Analysts focus on threat detection and incident response.

More about Application Security Engineer jobs

What are the most commonly searched types of Application Security Engineer jobs in Pennsylvania?

The most popular types of Application Security Engineer jobs in Pennsylvania are:

What are popular job titles related to Application Security Engineer jobs in Pennsylvania?

For Application Security Engineer jobs in Pennsylvania, the most frequently searched job titles are:

What job categories do people searching Application Security Engineer jobs in Pennsylvania look for?

The top searched job categories for Application Security Engineer jobs in Pennsylvania are:

What cities in Pennsylvania are hiring for Application Security Engineer jobs?

Cities in Pennsylvania with the most Application Security Engineer job openings:

What are popular job titles related to Application Security Engineer jobs in PA?

For Application Security Engineer jobs in PA, the most frequently searched job titles are:

Application Security Engineer jobs near you
Infographic showing various Application Security Engineer job openings in Pennsylvania as of August 2026, with employment types broken down into 73% Full Time, 23% Part Time, and 4% Contract. Highlights an 91% Physical, 3% Hybrid, and 6% Remote job distribution, with an average salary of $138,448 per year, or $66.6 per hour.

Application Security Engineer

Wawa, Inc.

Media, PA • On-site

$58.50 - $78/hr

Full-time

Re-posted 14 days ago

Wawa rating

6.5

Company rating: 6.5 out of 10

Based on 1,121 frontline employees who took The Breakroom Quiz

9th of 47 rated convenience stores

Job description

Job Description
Job Title: Application Security Engineer
Location: Corporate
Department: Information Technology
Job Summary: The Application Security Engineer is responsible for operating, supporting, maintaining, and improving the application security program by helping to ensure that security is built into all internally developed applications. This role executes all day-to-day operations, maintenance, functions, and capabilities relating to application security. Assist with the build and operation of application security tooling, automation, and engage with developers and product owners to solve application security problems. The role serves as a technical resource in the areas of secure software development at all stages of the SDLC and general information security best practices across all technology domains. The engineer is responsible for operating and improving Wawa's application security processes to secure and maintain Wawa's technology.
Principal Duties:
Operate and Support the Application Security Program
  • Support security best practices in the software development lifecycle by way of working closely with developers and product owners to secure applications at all stages.
  • Research, identify and communicate current and emerging application security threats and solutions.
  • Maintain, and iterate on secure coding practices, policies, standards, and procedures.
  • Test applications against security threats and vulnerabilities.
  • Support application security vulnerability management.
  • Create and deliver security presentations to technical and non-technical internal audiences.
  • Identify security design gaps in existing and proposed applications and recommend changes or enhancements.
  • Identify gaps and inefficiencies in the Application Security Program on a continual basis and propose solutions.
  • Participate in and support application security reviews, penetration tests, and threat modeling.
  • Contribute to the direction of internal security-focused programs.

Provide Strategic Support
  • Assist in the development of metrics and reporting framework to measure the effectiveness of the program.
  • Support the development and maintenance of Wawa's technology security policies and standards and ensure their application to technology architectures.
  • Assist with ensuring the ongoing compliance with both regulatory obligations and internally developed policies and standards.
  • Provide support to Technology Security Incident Response team during cyber incidents.

Serve as Security Liaison
  • Maintain internal networks among information security, information technology, and development teams to ensure support and alignment on initiatives.
  • Maintain external networks consisting of industry peers, ecosystem partners, vendors, and other relevant parties to address common trends, findings, and cybersecurity risks.
  • Act as technical resource for internal business teams and the IT department to plan, implement, and support new and existing software.
  • Support audit and assessment process for IT including annual PCI audit, IT general controls review, and any other audits or assessments of security and general IT controls.
  • Provide application security guidance on IT and business-related projects as required by the business. Participate in IT and security related projects.
  • Work effectively with business units to facilitate applications security engineering requirements and advocate application security best practices.

Essential Skills:
  • Ability to maintain and exude a positive attitude by committing to new ideas, being enthusiastic about work, and being helpful to, and thoughtful and considerate of, others across the organization.
  • Proven experience securing custom software.
  • Ability to work well individually and in a team environment.
  • Ability to learn on the job.
  • Ability to track task progress effectively.
  • Experience working with teams of developers and product owners.
  • Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate application security and risk-related concepts to diverse audiences.
  • Poise and ability to act calmly and competently in high-pressure, high-stress situations.
  • Must be a critical thinker, with strong problem-solving skills.
  • Ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.
  • Ability to engage in internal security technology projects and security remediation projects.
  • Ability to understand large technology implementations spanning hundreds of physical and virtual environments.
  • High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity.
  • High degree of initiative, dependability, and ability to work with little supervision while being resilient to change.
  • Ability to be on-call 24x7x365 rotation for information security incidents.

Basic Requirements:
  • Minimum of 2 years of experience in a complex technology environment, working in the application security engineering field.
  • Advanced knowledge of containers and container security.
  • Solid knowledge of cloud technology and security.
  • Solid knowledge of Java programming.
  • Basic knowledge of Golang programming.
  • Basic knowledge of React and React Native programming.
  • Experience with reading and writing enterprise software.
  • Experience preventing and remediating software security flaws in enterprise software.
  • Up-to-date knowledge of common security weaknesses and flaws, and how to prevent and remediate them.
  • Advanced knowledge of OWASP guidance.
  • Solid knowledge of web-related protocols (TCP/IP, HTTP, HTTPS, REST, etc.).
  • Understanding of relevant legal and regulatory requirements, such as Payment Card Industry Data Security Standard.
  • Degree in computer science preferred, or equivalent professional experience.
  • Professional security management certification is preferred, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC Defensible Security Certification (GDSA), Certified Secure Software Lifecycle Professional (CSSLP), Certified Ethical Hacker (CEH), etc.
  • Solid knowledge of common information security management frameworks, such as Critical Security Controls, and NIST 800-53 and Cybersecurity Framework.
  • Significant knowledge of application security concepts and technologies such as: SAST, DAST, SCA, IaC, cryptography, authn/authz, API security, etc.
  • Strong understanding of cloud, application security, and software engineering principles.
  • Experience with scripting automation (Python, PowerShell, Unix shell, JavaScript, TypeScript etc.).
  • Proven experience and strong understanding of the DevSecOps and SAFE Agile working methodologies.

Wawa will provide reasonable accommodation to complete an application upon request, consistent with applicable law. If you require an accommodation, please contact our Associate Service Center at asc@wawa.com.
Wawa, Inc. is an equal opportunity employer. Wawa maintains a work environment in which Associates are treated fairly and with respect and in which discrimination of any kind will not be tolerated. In accordance with federal, state and local laws, we recruit, hire, promote and evaluate all applicants and Associates without regard to race, color, religion, sex, age, national origin, ancestry, familial status, marital status, sexual orientation or preference, gender identity or expression, citizenship status, disability, veteran or military status, genetic information, domestic or sexual violence victim status or any other characteristic protected by applicable law. Unlawful discrimination will not be a factor in any employment decision.

What Wawa employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply