Application Security Engineer

Also called: AppSec Engineer, Product Security Engineer

Works with software teams to find and fix security bugs in code before it ships.

A day in the life

You review code for a new payment feature, catch a flaw that would let someone see other people's orders, and teach the developers how to avoid it. You also run tools that scan code automatically.

Pay over a career

Starting
$100k
Typical
$150k
High
$220k

Estimate.

Approximate: anchored on Bureau of Labor Statistics data for a broader job group.

Training

Bachelor's degree (4-year), about 5 years after high school. Bachelor's in CS; software development background.

Ways in: 4-year college, Certification. Training cost: $15k – $60k.

Majors to look at: Computer Science, Cybersecurity.

Outlook

Growing much faster than average (about 21% over 10 years). Within BLS information security analysts.

Will it last? Our AI estimate

Medium risk for 10 years. AI code scanners find and auto-fix many security bugs; threat modeling and working with dev teams stay human.

Start now, in high school

Classes: AP Computer Science A, AP CS Principles, Debate.

Official data: O*NET occupation 15-1212.

More Cybersecurity careers

Career Universe is an early version. Pay, training and AI-risk figures are estimates to start your own research, not verified facts. The research was written with AI research assistants, checked by validation scripts and spot-checked by hand. Check anything important with schools, employers and official sources. How the numbers work.