Staff Security Engineer

What you'll do

• Lead the design and evolution of application security architecture for on-premises products and cloud services.
• Partner with Engineering and Product teams to influence architectural decisions and drive secure-by-design practices.
• Define and standardize threat modeling frameworks and security design standards for complex distributed systems.
• Serve as the subject matter expert for security code reviews, API security testing, and remediation guidance.
• Architect and drive the roadmap for scalable security automation and software security tooling.
• Design and deploy automation frameworks that integrate security into cloud-native deployment pipelines.
• Identify new vulnerability classes and lead research initiatives or complex table-top exercises.
• Deploy advanced technology controls to maximize observability and harden key attack surfaces.

What we're looking for

• Master's Degree (preferred).
• 10+ years of hands-on application security experience.
• 12+ years of hands-on application security experience (preferred).
• Comprehensive knowledge of security fundamentals for modern web applications and cloud-native platforms.
• Experience in Go, Python, or Java to build scalable security automation frameworks.
• Proven experience evolving the software development lifecycle to embed security by default in CI/CD pipelines.
• Ability to lead technical investigations, threat modeling, and cross-functional security initiatives.