Home / For employers / How to hire… / Application security engineer

How to hire an application security engineer: 231 companies are hiring now

What you compete with, counted from today’s 377 open application security engineer postings: who is hiring, where, what they pay and how long postings stay up. Then six steps, each with a free template or tool.

Companies hiring now
231
Open postings
377
Median advertised pay
$219K
Remote
30%
Half are open for over
55 days

What you compete with

Companies hiring this work now231: Anduril Industries (14), SpaceX (13), Chainguard (11), Anthropic (7), Samsara (6), Accenture Federal Services (6)
Countries named most🇺🇸United States (207), 🇬🇧United Kingdom (28), 🇨🇦Canada (23), 🇮🇳India (18), 🇮🇱Israel (10)
Pay advertised$181K – $254K for the middle half; median $219K (183 postings with a yearly US-dollar range)
Postings that state pay59%
Where the work is doneRemote 30% · hybrid 14% · on site or not stated 56%
Experience askedMedian 5 years
Skills named mostAgile (6%)
Benefits named mostParental leave (30%), Equity (23%), Learning budget (8%), Unlimited PTO (5%)
How long postings stay upHalf of today’s open postings have been up more than 55 days

Counted from the 377 open postings for this work on Nov 15, 2026, read from employers’ own careers pages and recounted on every update.

Which role do you need?

Close to application security engineer work, and often confused with it. Pick by the work you need done, then the guide for that role:

RoleOpen postingsMedian advertised payGuide
Application security engineer377$219Kthis page
Cybersecurity2,165$199KHow to hire
Security engineer1,648$204KHow to hire
Security analyst and incident response538$172KHow to hire
Penetration tester178$202KHow to hire
Security compliance (GRC)366$173KHow to hire

Six steps to hire an application security engineer

  1. Set the pay range first. Today’s 183 application security engineer postings that state a yearly US-dollar range offer $181K to $254K for the middle half. Three quarters of them offer more than the lower figure. 59% of the postings state pay; in several US states and EU countries the law requires it. See application security engineer pay in detail.
  2. Write the description. Start from the application security engineer job description template, then check it with the job description checker: the pay, the place of work and the must-haves should be clear before the second paragraph.
  3. Decide where the person can work. 30% of today’s application security engineer postings are remote and 14% hybrid. If yours is remote, name the countries or time zones; “remote” alone brings applications you cannot accept.
  4. Post it where people look. Post the job free on this site, add it to your own careers page and send it to people you know who do this work.
  5. Screen for the skills that matter. Today’s postings name Agile most often: check them in the work, not only in the resume. Score every candidate on the same points with the interview scorecard; the application security engineer interview questions show what good candidates prepare for.
  6. Decide quickly. Half of today’s open application security engineer postings have been up more than 55 days: a candidate who waits for your answer may be talking to other employers meanwhile. Tell every candidate when you will decide, and keep to it.

A take-home task for an application security engineer

  • Use a real, anonymised task from your own work: the kind of problem the person will meet in the first month.
  • Keep it to two or three hours, say so, and pay for anything longer.
  • Ask for three things: the result, how they got there, and one recommendation or next step.
  • Score every answer on the same points: correctness, clarity, judgement and the use of Agile.
  • Talk it through in the next interview: how they explain their choices tells as much as the result.
  • Not sure yet? A short paid trial project or a contract-to-hire term lets both sides check the fit.

Questions about hiring application security engineers

How much does it cost to hire an application security engineer?
The pay is the largest part: today’s application security engineer postings that state a yearly US-dollar range advertise a median of $219K. Add advertising, agency fees if you use one and the hours your team spends interviewing; the cost per hire calculator on this site adds them up. Posting on this site is free.
How long does it take to hire an application security engineer?
Half of today’s open application security engineer postings have been up more than 55 days. A posting can close before the person starts, so plan for a few weeks more.
Where can I find application security engineers?
231 companies are hiring application security engineers on this site today. Post your job here free, on your own careers page and in communities where application security engineers meet; the table on this page lists the countries named most in today’s postings.
Should I hire a freelance application security engineer or a full-time one?
1% of today’s application security engineer postings are contract roles. Freelance suits a defined project with an end date; full-time suits ongoing work and anything that needs knowledge of your business. A paid trial project or a contract-to-hire term lets both sides check the fit first.
How much does a freelance application security engineer cost per hour?
Few postings for this work state an hourly rate. The median yearly pay divided by 2,080 hours is about $105 an hour; contractors usually charge more, since they pay their own taxes, holidays and insurance.
What skills should I test in an application security engineer?
The ones today’s postings name most: Agile (6%). Test them on a small task from your own work rather than with trivia questions.

Everything about application security engineer work

See also: application security engineer job description template · 377 open application security engineer jobs · cost per hire calculator · all hiring guides