Application Security Engineer jobs in 2026 — required skills, demand trends, and top hiring cities
As of 2026-11-07, Skillenai has indexed 609 job postings with the title “Application Security Engineer” over the past 90 days. The skill mentioned most often is threat modeling, with demand share up 20.4% vs the prior 4 weeks.
Last updated · 90d ending 2026-11-07
How well does your resume match Application Security Engineer?
Upload your resume and Skillenai will score it against the Application Security Engineer skills on this page, then show exactly which ones you are missing.
Frequently asked questions about Application Security Engineer jobs
+How many Application Security Engineer jobs are being posted in 2026?
Skillenai has indexed 609 job postings with the title “Application Security Engineer” over the 90 days ending 2026-11-07.
+What skills do Application Security Engineer jobs require?
Across Application Security Engineer postings indexed by Skillenai over the 90 days ending 2026-11-07, the skills mentioned most often are threat modeling, SAST, Python, DAST, Application security.
+Which cities are hiring the most Application Security Engineer?
As of 2026-11-07, Application Security Engineer postings indexed by Skillenai are concentrated in San Francisco, New York City, Austin, Lisbon, Bengaluru.
+Is Application Security Engineer a good career path right now?
Skillenai indexes 609 Application Security Engineer postings over the 90 days ending 2026-11-07. The skill mentioned most often in Application Security Engineer postings is threat modeling, so building it gives the strongest signal that an applicant matches the role.
+How can I track new Application Security Engineer job postings as they’re indexed?
Skillenai sends a daily email digest of new Application Security Engineer postings indexed across the open web. Subscribe from your account dashboard after creating a free Skillenai account.
+What roles do people move into and out of Application Security Engineer?
The career-flow chart shows roles before and after observed employer changes across all locations. Counts are moves, not distinct people or promotion probabilities. Same-role moves to another employer are included. The incoming and outgoing sides are separate groups of observations, not a matched three-stage journey.
Weekly indexed Application Security Engineer postings — last 90 days
Salary distribution
Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized
Career paths through Application Security Engineer
Different-role employer moves. Each side is scaled independently.
Historical career profiles · all locations
52 employer moves kept the same role.
Roles before Application Security Engineer
Roles after Application Security Engineer
How to read this chart · view counts
Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.
Same role means a change of employer while keeping the same role. Counts are moves, not distinct people, promotions, or your chances of making a particular move.
Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.
| Connection | Moves |
|---|---|
| Before: Application Security Engineer (different employer) | 52 |
| Before: Software Engineer | 22 |
| Before: Security Engineer | 16 |
| Before: Security Analyst | 8 |
| Before: Cyber Security Analyst | 7 |
| Before: Application Security Analyst | 7 |
| Before: Security Consultant | 6 |
| Before: Information Security Engineer | 6 |
| After: Application Security Engineer (different employer) | 52 |
| After: Security Engineer | 19 |
| After: Penetration Tester | 7 |
| After: Software Engineer | 6 |
| After: Security Architect | 6 |
| After: Product Security Engineer | 5 |
| After: Application Security Consultant | 4 |
| After: Information Security Engineer | 3 |
Skills most often required for Application Security Engineer
| Name | Postings | Share |
|---|---|---|
| threat modeling | 352 | 57.8% |
| SAST | 325 | 53.4% |
| Python | 275 | 45.2% |
| DAST | 275 | 45.2% |
| Application security | 258 | 42.4% |
| CI/CD | 239 | 39.2% |
| SCA | 226 | 37.1% |
| penetration testing | 223 | 36.6% |
| OWASP Top 10 | 199 | 32.7% |
| AWS | 151 | 24.8% |
| Java | 141 | 23.2% |
| vulnerability management | 136 | 22.3% |
| JavaScript | 129 | 21.2% |
| secure coding | 113 | 18.6% |
| DevSecOps | 112 | 18.4% |
Top companies posting Application Security Engineer jobs
Employers ranked by indexed job postings in the last 90 days.
| Company | Postings · 90 days |
|---|---|
| Bugcrowd | 17 |
| Samsara | 15 |
| GuidePoint Security | 14 |
| Apollo.io | 10 |
| Accenture Federal Services | 9 |
| Bah | 9 |
| ABOUT YOU SE & Co. KG | 8 |
| True Anomaly | 7 |
| Veeam | 7 |
| State Street | 7 |
Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.
Top metros hiring Application Security Engineer
| Name | Postings | Share |
|---|---|---|
| San Francisco | 22 | 3.6% |
| New York City | 20 | 3.3% |
| Austin | 9 | 1.5% |
| Lisbon | 8 | 1.3% |
| Bengaluru | 7 | 1.1% |
| Berlin | 7 | 1.1% |
| Boston | 7 | 1.1% |
| Hyderabad | 7 | 1.1% |
| Long Beach | 7 | 1.1% |
Explore related pages
How this was computed
Weekly job-count charts omit the incomplete current week (weeks start Monday, UTC). Totals include all postings in the stated window. Counts derive from the Skillenai jobs index over the 90 days ending 2026-11-07, matching postings whose canonical role is “Application Security Engineer”. Pages refresh weekly (or daily for the top-50 most-posted roles). Adjusted posting share: 0.2% to 0.2%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,471 identified employers and covers 71% of earlier and 70% of latest indexed postings. Windows: 2026-07-07 to 2026-10-05 and 2026-08-04 to 2026-11-02 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.
- role
- Application Security Engineer
- source
- Skillenai jobs index, deduplicated daily
- data_as_of
- 2026-11-07
- window_days
- 90