Senior Engineer, Application Security

About the role

Hi there! Thanks for stopping by 👋

Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place!

As a Senior Application Security Engineer, you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors.

What you’ll be doing:

- Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows.

- Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines.

- Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations.

- Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active.

- Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs.

- Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities.

- Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops.

- Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines.

What you need to bring:

- Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments.

- Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.

- Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices.

- Proven track record tuning SAST, DAST, SCA, Secrets, and LLM scanner pipelines in CI/CD environments.

- Demonstrated experience with threat modeling methodologies, Secure by Design principles, and guiding developers through code remediations.

- Proven experience leveraging AI/LLM tools to automate security analyses, accelerate triage, and optimize developer security workflows.

- Fluency in modern software development languages (e.g., Python, Go, JavaScript/TypeScript, Java).