Staff Applications Security Engineer

Fortinet

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Sunnyvale, CA
Salary
$170,000–$240,000 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $189k
This role $205k
$131k $252k
below market most similar roles pay here above market

This role pays more than 58% of similar roles. Most pay $159,157–$218,262 — the blue band above. At the midpoint, this role pays about $205k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Fortinet

Fortinet is a US-based cybersecurity company best known for its FortiGate next-generation firewalls. It sells a broad security platform spanning network security, SD-WAN, endpoint protection, cloud security, and SIEM/SOC operations.

Fortinet currently has 100 open roles on FindRole.

Listed pay typically runs $136,000–$180,000 across 73 roles with salary data.

Most-posted roles

View all roles at Fortinet

At a glance

TL;DR · Staff Applications Security Engineer

Role Posting Log in to save

The Staff Applications Security Engineer joins the Corporate Information Security team as a technical subject matter expert. This role involves conducting security reviews, performing manual source code audits, and executing penetration tests on existing codes and new features. The engineer will develop vulnerability mitigation strategies, drive static and dynamic application security testing programs, and advise development teams on SDLC best practices. Key technical requirements include proficiency in Java, .NET, Python, or JavaScript frameworks, alongside knowledge of OWASP Top 10, API security, and cloud-native architectures including microservices and containerization. The position requires expertise in DAST, SAST, IAST, and SCA tools, as well as AI/ML concepts like RAG and AI Red Teaming. The work focuses on securing enterprise applications through threat modeling and DevSecOps principles.

Skills

Application Security SAST DAST IAST SCA Python Java .NET JavaScript OWASP Top 10 API Security Cloud-Native Microservices Containerization CI/CD DevSecOps Threat Modeling MITRE ATT&CK STRIDE PASTA OAuth JWT CSP SOP CORS AI Red Teaming CSPM ASPM Penetration Testing

What you'll do

  • Perform security code reviews, penetration tests, and architectural reviews on new and existing features.
  • Develop and communicate vulnerability mitigation strategies to development teams.
  • Manage externally reported vulnerabilities as a member of the Responsible Disclosure Program committee.
  • Drive the company's static and dynamic application security testing (SAST/DAST) programs.
  • Design and implement tools, processes, and controls to ensure security and privacy are built into applications.
  • Advise development teams on secure SDLC best practices and security architecture patterns.
  • Research new attack vectors that may impact company applications and infrastructure.
  • Coach peers and internal teams on application security concepts and best practices.

What we're looking for

  • A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
  • 5+ years of work experience as an Information Security Researcher or Engineer.
  • 3+ years of experience manually auditing source code or programming in Java, .NET, Python, or JavaScript frameworks.
  • Proven experience in application penetration testing, security code review, and DAST, SAST, IAST, and SCA tools.
  • Strong understanding of OWASP Top 10, API security, Cloud-Native architecture, microservices, containerization, and web security standards.
  • Strong understanding of AI/ML and LLM concepts including RAG, Agentic Workflows, AI Red Teaming, and secure AI development.
  • Experience with threat modeling (MITRE ATT&CK, STRIDE, PASTA), CI/CD pipelines, DevSecOps, and cloud-based security solutions.
  • Experience in CSPM/ASPM tools, OSWE/OSCP/GWEB/GPEN certifications, or Mobile Application Penetration Testing (preferred).

Related searches

More Staff Applications Security Engineer jobs Staff Applications Security Engineer jobs in Sunnyvale All jobs at Fortinet

More like this

Similar roles

Staff Applications Security Engineer

Fortinet

Sunnyvale, CA 11 days ago $170,000–$240,000
Application Security SAST DAST IAST SCA Python Java .NET JavaScript OWASP Top 10 API Security Cloud-Native Microservices Containerization CI/CD DevSecOps Threat Modeling MITRE ATT&CK STRIDE PASTA OAuth JWT CSP SOP CORS Cryptography AI Red Teaming CSPM ASPM Penetration Testing
5+ yrs exp Hybrid
Save

Staff AI Security Engineer

Fortinet

Sunnyvale, CA 11 days ago $170,000–$240,000
AI Security LLM MLOps Deep Learning CI/CD DevSecOps Threat Modeling STRIDE MAESTRO Vector Databases Agentic AI Prompt Engineering OAuth JWT Microservices Containerization OWASP Top 10 OWASP LLM Top 10 Cryptography GDPR ISO 42001 NIST AI RMF
7+ yrs exp
Save

Staff Application Security Engineer

Brex

Remote 11 days ago $240,000–$300,000
Application Security AI Security AWS Kubernetes Python Go Kotlin gRPC GraphQL Threat Modeling Microservices LLM Gateways Offensive Security Container Security Distributed Systems
8+ yrs exp Remote
Save

Staff Security Engineer

Micron Technology

Boise, ID 35 days ago
Data Loss Prevention (DLP) Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio Azure AI Foundry AWS Bedrock SharePoint Regex Networking Operating Systems
5+ yrs exp
Save

Staff Security Engineer

Intuit

Mountain View, CA 67 days ago $207,000–$280,000
Kubernetes Terraform Golang Java CI/CD AWS Google Cloud Platform Azure Helm DevSecOps SRE IAM Applied Cryptography PKI Configuration Management Network Security Vulnerability Management Detection & Response Engineering Serverless Architecture
10+ yrs exp
Save

Staff Security Engineer

Alkami

Remote 4 days ago $128,800–$161,000
AWS Cloud Security Security Automation Infrastructure-as-Code Vulnerability Management Secrets Management Identity Security Endpoint Protection Network Security CloudFlare PaloAlto OpenAI Scripting Root Cause Analysis CISSP CCSP GSEC
6+ yrs exp Remote
Save