Application Security Engineer (senior - principal) Landmark
Core
Identify and reduce security risk in software products and digital platforms for the energy industry by performing security assessments, analyzing vulnerabilities, and partnering with engineering teams on remediation.
Role type
Senior IC application security engineer (DevSecOps)
Builds
Secure software development lifecycle, secure cloud deployments, and resilient software supply chains
Domain
Energy industry software and cloud security
Required skills
Application security assessments, vulnerability analysis, secure SDLC, DevSecOps, cloud security, software supply chain security, threat modeling, API security, secure coding, CI/CD integration
Preferred skills
SAST/DAST/SCA tools, OWASP guidance, Terraform, Python/PowerShell/Bash scripting, Azure/AWS, AI-enabled application security
Technologies
GitLab, Azure, AWS, Python, PowerShell, Bash, Terraform, SAST, DAST, SCA
Responsibilities
Perform application security assessments across web apps, APIs, and cloud services; review SAST/DAST/SCA results and validate findings; work with engineers to explain risks and track remediation; integrate security controls into CI/CD pipelines; review architectures for security weaknesses; retest remediated vulnerabilities; document risk decisions and metrics.
Seniority
Senior, hands-on IC
