Application Security Engineer

Job Details

Description

Here at Priority Dispatch, we know that protecting lives starts with the right protocols, training, and ensuring systems are safe and reliable. We're looking to hire a full time Application Security Engineer to use their expertise to build and defend secure systems that support our mission of delivering life saving dispatch systems! This is your chance to join an award winning company while having your work contribute and make a direct impact for good in communities around the world.

We offer benefits that include medical, dental, vision, legal, and pet insurance, 401K and company contributions, PTO, short and long term disability and life insurance, and more while having meaningful work at a company that's been voted as a top place to work in Utah for the past 5 years running! Come see why our teams love to work here!

Job Summary

We are seeking an experienced Application Security Engineer to secure our web and desktop applications by implementing and managing SAST, DAST, and SCA processes. This role partners with developers, QA, and DevOps to embed security into CI / CD pipelines, conduct code reviews, and promote secure coding practices. The ideal candidate has deep expertise in OWASP Top Ten risks, API security, and threat modeling, with experience addressing unique challenges in desktop applications where automation is limited. Familiarity with cloud-native and AI-driven systems is essential, along with knowledge of compliance frameworks such as ISO 27001, NIST, CMMC, and Cyber Essentials. This position reports to the Director of Enterprise Solutions and Technology and plays a critical role in strengthening the organization’s overall security posture. This is a hybrid role based in Salt Lake City, Utah.

Major Responsibilities

• Ensure all application code is thoroughly tested and scanned for risks, vulnerabilities, and third-party dependencies using SAST, DAST, and SCA tools.
• Provide additional attention to desktop applications where automated security tooling may be limited, developing custom solutions as needed.
• Conduct penetration testing on core products, as well as other web applications and public-facing websites.
• Design and implement security controls for APIs, including secure authentication, authorization, and protection against common threats such as cross-site request forgery (CSRF).
• Collaborate with development teams to integrate Identity and Access Management (IAM) solutions aligned with least privilege and zero trust principles.
• Serve as a key contributor to the security architecture and design of software systems, working closely with engineering teams to embed security into technical decisions.
• Participate in the internal Security Council, contributing to strategic decisions and security governance.
• Lead training initiatives for developers, QA, and DevOps teams to promote secure design principles and a security-first mindset.
• Collaborate with engineering teams to integrate security into the software development lifecycle (SDLC).
• Perform threat modeling and risk assessments to identify and mitigate potential vulnerabilities early in the development process.
• Stay current with evolving security regulations, compliance standards, and emerging threats, ensuring organizational alignment and readiness.

Qualifications

Qualifications

Physical Requirements / Essential Job Functions