Senior Software Engineer, Application Security - AV and Software Infrastructure

What you'll do

• Review application designs and source code to identify security risks before deployment.
• Develop threat models for distributed systems and software development workflows.
• Design and implement authentication and authorization controls for APIs, services, and applications.
• Build reusable security libraries, tooling, and reference implementations for engineering teams.
• Improve handling of credentials, secrets, sensitive data, and security-relevant logging.
• Integrate automated security checks and actionable remediation paths into CI/CD workflows.
• Investigate application vulnerabilities and develop fixes with service owners.
• Partner with security teams to prioritize improvements and measure the effectiveness of security controls.

What we're looking for

• 12+ years of relevant experience and a BS or MS in Computer Science, Computer Engineering, or a related field, or equivalent experience.
• Experience building and operating production software with substantial work in application or product security.
• Strong programming skills in Go, Python, Java, C++, or a comparable language.
• Practical understanding of web and API security, authentication, authorization, and common vulnerability classes.
• Experience with threat modeling and security reviews for distributed systems.
• Ability to turn security findings into concrete engineering changes and prioritize work based on risk and impact.
• Clear communication and experience working collaboratively with engineering teams.
• Experience with OAuth 2.0, OpenID Connect, service identity, and authorization policy systems (preferred).