Counted October 17, 2026 · from employers’ own postings
Application Security Engineer: $175K median posted pay.
From 55 salary bands employers posted on 87 open application security engineer roles in software engineering. Never an estimate.
The ladder, by level
What each rung pays.
| Level | Open roles | Median posted band | Middle half |
|---|---|---|---|
| Senior | 37 | $195K | — |
| Staff | 12 | $230K | — |
| Mid | 2 | — (2 of 8 bands) | — |
| Principal | 1 | — (1 of 8 bands) | — |
Levels as the postings name them. A rung shows a median only where eight or more postings at that level carried a band.
Who is hiring
The employers with the most open.
| Employer | Open roles | Entry level |
|---|---|---|
| nord-security | 6 | — |
| samsara | 6 | — |
| Booz Allen Hamilton | 5 | — |
| Bah | 5 | — |
| Manulife and John Hancock | 3 | — |
| Accenture Federal Services | 2 | — |
| CACI | 2 | — |
| Thought Machine | 2 | — |
| Apollo.io | 2 | — |
| G-P | 2 | — |
Counted from employers’ own job boards. The ten with the most open application security engineer roles tonight.
The skills, as the postings name them
What these postings ask for.
| Skill | Postings | At entry |
|---|---|---|
| Security Engineering | 86 | — |
| Secure Coding | 66 | — |
| Penetration Testing | 55 | — |
| Python | 51 | — |
| CI/CD | 48 | — |
| Cloud Infrastructure | 44 | — |
| Triage | 39 | — |
| Vulnerability Management | 35 | — |
| Go | 32 | — |
| Cybersecurity | 32 | — |
Where the work is
34% of these roles are remote.
- Remote34%30 roles
- Hybrid7%6 roles
- On site45%39 roles
- Not stated14%12 roles
Make software engineering your path — free.
A CareerVersion remembers your record and shows you three real software engineering roles and the three skills the market asks for, on your first screen.
How this was counted
Every figure is counted from 87 open postings read from employers’ own job boards on October 17, 2026, and recounted every night. Pay is the band the employer posted — never an estimate, never a model — and 55 of these postings carried one. Titles are grouped by the words the postings use, with levels, shifts and schedules removed, so “Senior Application Security Engineer (Nights)” counts here too. 100% of roles with this title sit in software engineering, which is why this page belongs to that career. A title gets a page only where twenty-five or more roles are open, eight or more of them posted a band, three or more employers are hiring for it and four in five of its postings sit in one career, so no page here is a guess.