Application Security Engineer jobs in 2026 — required skills, demand trends, and top hiring cities
As of 2026-09-30, Skillenai has indexed 376 job postings with the title “Application Security Engineer” over the past 90 days. The skill mentioned most often is threat modeling, with demand share up 5.7% vs the prior 4 weeks.
Last updated · 90d ending 2026-09-30
How well does your resume match Application Security Engineer?
Upload your resume and Skillenai will score it against the Application Security Engineer skills on this page, then show exactly which ones you are missing.
Prepare for your next Application Security Engineer interview
We’re bringing our job-posting and career-profile data into mock interviews, so you can practice the skills and experience that matter for Application Security Engineer roles.
Frequently asked questions about Application Security Engineer jobs
+How many Application Security Engineer jobs are being posted in 2026?
Skillenai has indexed 376 job postings with the title “Application Security Engineer” over the 90 days ending 2026-09-30.
+What skills do Application Security Engineer jobs require?
Across Application Security Engineer postings indexed by Skillenai over the 90 days ending 2026-09-30, the skills mentioned most often are threat modeling, SAST, DAST, Application security, Python.
+Which cities are hiring the most Application Security Engineer?
As of 2026-09-30, Application Security Engineer postings indexed by Skillenai are concentrated in San Francisco, New York City, Berlin, Austin, Boston.
+Is Application Security Engineer a good career path right now?
Skillenai indexes 376 Application Security Engineer postings over the 90 days ending 2026-09-30. The skill mentioned most often in Application Security Engineer postings is threat modeling, so building it gives the strongest signal that an applicant matches the role.
+How can I track new Application Security Engineer job postings as they’re indexed?
Skillenai sends a daily email digest of new Application Security Engineer postings indexed across the open web. Subscribe from your account dashboard after creating a free Skillenai account.
+What roles do people move into and out of Application Security Engineer?
The career-flow chart shows roles before and after observed employer changes across all locations. Counts are moves, not distinct people or promotion probabilities. Same-role moves to another employer are included. The incoming and outgoing sides are separate groups of observations, not a matched three-stage journey.
Weekly indexed Application Security Engineer postings — last 90 days
Salary distribution
Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized
Career paths through Application Security Engineer
Different-role employer moves. Each side is scaled independently.
Historical career profiles · all locations
50 employer moves kept the same role.
Roles before Application Security Engineer
Roles after Application Security Engineer
How to read this chart · view counts
Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.
Same role means a change of employer while keeping the same role. Counts are moves, not distinct people, promotions, or your chances of making a particular move.
Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.
| Connection | Moves |
|---|---|
| Before: Application Security Engineer (different employer) | 50 |
| Before: Software Engineer | 21 |
| Before: Security Engineer | 12 |
| Before: Security Analyst | 8 |
| Before: Cyber Security Analyst | 7 |
| Before: Information Security Engineer | 6 |
| Before: Application Security Analyst | 6 |
| Before: Penetration Tester | 4 |
| After: Application Security Engineer (different employer) | 50 |
| After: Security Engineer | 17 |
| After: Penetration Tester | 7 |
| After: Software Engineer | 6 |
| After: Security Architect | 6 |
| After: Product Security Engineer | 4 |
| After: Cybersecurity Engineer | 3 |
| After: Application Security Analyst | 3 |
Skills most often required for Application Security Engineer
| Name | Postings | Share |
|---|---|---|
| threat modeling | 195 | 51.9% |
| SAST | 184 | 48.9% |
| DAST | 159 | 42.3% |
| Application security | 156 | 41.5% |
| Python | 132 | 35.1% |
| SCA | 128 | 34.0% |
| penetration testing | 118 | 31.4% |
| OWASP Top 10 | 113 | 30.1% |
| CI/CD | 107 | 28.5% |
| AWS | 87 | 23.1% |
| vulnerability management | 81 | 21.5% |
| Java | 79 | 21.0% |
| DevSecOps | 77 | 20.5% |
| secure coding | 65 | 17.3% |
| authentication | 56 | 14.9% |
Top companies posting Application Security Engineer jobs
Employers ranked by indexed job postings in the last 90 days.
| Company | Postings · 90 days |
|---|---|
| Bugcrowd | 8 |
| Nord Security | 7 |
| ABOUT YOU SE & Co. KG | 7 |
| Samsara | 7 |
| State Street | 6 |
| AbbVie | 6 |
| ServiceNow | 6 |
| SonarSource | 5 |
| Bah | 5 |
| HeartFlow | 4 |
Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.
Top metros hiring Application Security Engineer
| Name | Postings | Share |
|---|---|---|
| San Francisco | 14 | 3.7% |
| New York City | 13 | 3.5% |
| Berlin | 9 | 2.4% |
| Austin | 8 | 2.1% |
| Boston | 8 | 2.1% |
| Chicago | 7 | 1.9% |
| Singapore | 6 | 1.6% |
| Bengaluru | 5 | 1.3% |
| Hyderabad | 5 | 1.3% |
Get a daily email digest of new Application Security Engineer jobs
Skillenai aggregates application security engineer jobs from across the open web. Click below and we'll open a pre-filled daily digest — change the cadence to hourly or weekly if you prefer, then save. Free account required (~30 seconds).
Explore related pages
How this was computed
Counts derive from the Skillenai jobs index over the 90 days ending 2026-09-30, matching postings whose canonical role is “Application Security Engineer”. Pages refresh weekly (or daily for the top-50 most-posted roles). Adjusted posting share: 0.1% to 0.2%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,595 identified employers and covers 68% of earlier and 72% of latest indexed postings. Windows: 2026-06-02 to 2026-08-31 and 2026-06-30 to 2026-09-28 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.
- role
- Application Security Engineer
- source
- Skillenai jobs index, deduplicated daily
- data_as_of
- 2026-09-30
- window_days
- 90
The demand, skills, and geo numbers on this page come from the same Skillenai labor market index that powers our API. Use it for compensation benchmarking, hiring-competition analysis, and skill-adoption tracking.
Skillenai for recruiters →