Senior Application Security Engineer

Skills

About the Role

You will lead application security from code through deployment. You will build and operate vulnerability-management practices, integrate security controls into CI/CD, manage penetration tests, automate security work, and lead threat modeling and design reviews. You will define secure coding standards, evaluate security tools, mentor engineers, participate in incident response, and build AI agents for infrastructure and code testing.

Requirements

• 6-8+ years in application security, product security, or security-focused software engineering
• Coding ability in Go, Python, TypeScript, JavaScript, Java, or Kotlin
• Experience with vulnerability management
• Experience integrating SAST, DAST, SCA, secrets scanning, and IaC scanning into CI/CD
• Knowledge of software supply-chain security and dependency vetting
• Knowledge of OWASP Top 10 and secure coding patterns
• Experience leading threat modeling and security design reviews
• Experience leading application security initiatives
• Experience mentoring engineers and leading security champions programs
• Expertise in authentication and authorization, cryptography, API security, or cloud-native application security
• Proficiency with AI-assisted security tooling
• Cloud security exposure is preferred
• Blockchain or Web3 security experience is preferred
• Knowledge of SOC 2, PCI DSS, or GLBA is preferred

Responsibilities

• Own and evolve the vulnerability management program
• Integrate security gates into the software development lifecycle
• Manage third-party penetration tests and remediation
• Automate patching and dependency upgrades
• Lead threat modeling, architecture reviews, and security design reviews
• Define application security strategy, roadmap, and secure coding standards
• Mentor engineers and build a security champions program
• Evaluate and manage application security tooling and vendors
• Track security metrics and communicate risk
• Participate in incident response, on-call rotations, and post-incident reviews
• Use AI for threat hunting, vulnerability scanning, and triage
• Build AI agents for infrastructure and code testing
• Follow security policies and data-handling procedures
• Complete security awareness training
• Report suspected security incidents or suspicious activity

Benefits

• Medical, dental, and vision coverage with 100% employer-paid premiums for employees and dependents on select plans
• HSA, FSA, dependent care FSA, 401(k), and commuter benefits
• Employer-paid life and disability insurance
• 11 observed holidays and PTO
• Up to 12 weeks of paid family leave
• Continuing education reimbursement
• RSU equity