Skill report · Security
Application Security: demand in job postings
Application Security is named in 6% of the 28,652 tech job postings Mettlespark read in the United States and Canada over the last 180 days (1,620 postings), most often for Security Engineer at 52%, Full-Stack Engineer at 7% and DevOps Engineer at 7%. When a posting names it, 84% list it as required.
From 28,652 postings in the United States and Canada, April 23, 2026 to October 20, 2026. Updated October 20, 2026. How we count
- Postings naming it
- 1,6206% of all postings
- Required when named
- 84%rather than nice to have
- Senior level or above
- 66%of the postings naming it
- Time to learn
- about 40 hoursfrom zero to job-ready, Mettlespark's estimate
Over time
Its share of postings has risen about 3 points since October 2023, comparing like with like.
The roles that ask for it most
The share of each role's postings that name Application Security.
| Role | Share of the role's postings |
|---|---|
| Security Engineer | |
| Full-Stack Engineer | |
| DevOps Engineer | |
| Software Engineer | |
| AI Engineer | |
| Backend Engineer | |
| Applied AI Engineer | |
| Cloud Engineer |
Often asked for alongside
The share of postings naming Application Security that also name each.
- CI/CD54%
- Python53%
- AWS49%
- Code Review41%
- Cloud Security37%
- Java35%
Industries
Where the postings naming it come from.
- Cybersecurity22%
- Banking & Financial Services15%
- Enterprise Software & SaaS8%
- Healthcare6%
Quick answers
Is Application Security in demand?
Application Security is named in 6% of tech job postings in the United States and Canada over the last 180 days, 1,620 postings, and required in 84% of those. Its share of postings has risen about 3 points since October 2023, comparing like with like.
Which jobs ask for Application Security?
Security Engineer, Full-Stack Engineer, DevOps Engineer and Software Engineer postings name it most often: 52% of Security Engineer postings, 7% of Full-Stack Engineer postings, 7% of DevOps Engineer postings.
What skills go with Application Security?
Postings that name Application Security most often also name CI/CD, Python, AWS and Code Review.
How long does it take to learn Application Security?
About 40 hours from zero to job-ready, by Mettlespark's estimate; less with the prerequisites already in hand.