Senior Application Security Engineer

What you'll do

• Lead application security projects from initial planning through implementation and coordination of various contributors.
• Conduct threat modeling and security architecture reviews for customer-facing applications, APIs, and AI/ML systems.
• Design and implement secure-by-default controls including coding standards, API protections, and CI/CD safeguards.
• Build automation tools to improve vulnerability detection, prioritization, and validation while reducing developer friction.
• Assess the security of AI-enabled products, focusing on GenAI integrations and sensitive data handling.
• Provide technical leadership during high-severity incidents to determine root causes and drive lasting improvements.
• Mentor engineers and contribute to design and code reviews to strengthen overall security practices.

What we're looking for

• Must have 5+ years of experience in security engineering, software engineering, or a related technical role.
• Must have at least 2 years of experience focused on application or product security.
• Experience leading security projects involving multiple contributors or partner teams is required.
• Experience conducting threat modeling and security architecture reviews for complex production applications is required.
• Experience developing production software or security automation in Java, Python, Ruby, Go, or similar languages is required.
• Experience implementing application security controls such as API security, SAST, DAST, SCA, CI/CD security, or secrets management is required.
• Experience identifying, validating, prioritizing, and driving remediation of application vulnerabilities is required.
• Experience securing cloud-native systems, including web applications, APIs, or microservices, is required.