Senior Application Security Engineer
Core
Design guardrails, automation, and AI-powered tooling to secure the SDLC, CI/CD, and software supply chain, enabling engineering teams to ship securely by default.
Role type
Senior IC application security engineer (DevSecOps & AI security)
Builds
Automated security controls for CI/CD pipelines, AI/LLM security testing agents, and supply chain integrity tooling
Domain
Cybersecurity, Software Development, Cloud Infrastructure
Deliverable
production ML models
Required skills
Secure SDLC design, CI/CD security architecture, SAST/DAST/SCA tuning, WAF/API protection, AI/LLM security, Threat modeling, Cloud security (AWS/Azure/GCP), OWASP/CWE knowledge
Preferred skills
LLM-powered tooling development, Sigstore/Cosign implementation, GitOps/IaC scanning, Runtime protection, Python/Java/Go/JavaScript coding
Technologies
GitHub Actions, Jenkins, GitLab, Azure DevOps, LangGraph, Terraform, CloudFormation, Sigstore, Cosign, SLSA, NIST SSDF
Responsibilities
Define secure coding standards and reference patterns, Architect security control layers for CI/CD platforms, Build AI-driven security testing and agentic workflows, Establish threat modeling practices for applications and pipelines, Drive vulnerability prioritization and remediation, Mentor engineering teams on secure practices
Seniority
Senior, hands-on IC
