Staff Application Security Engineer
Core
Strategic Application Security Engineer embedding security into the SDLC, leveraging AI to scale security outcomes and guide engineering teams.
Role type
Staff Application Security Engineer (Strategic IC)
Builds
Secure-by-design engineering workflows, AI-enabled security platforms, and a proactive security-first culture.
Domain
Application Security, Cloud Infrastructure, AI Engineering
Required skills
Application security strategy, Secure coding practices, AI tool integration and validation, Risk-based remediation guidance, Security platform configuration (Veracode, SonarQube, Wiz), Bash scripting, Infrastructure as Code (Ansible, Terraform), Developer mindset
Preferred skills
Experience with Veracode, SonarQube, Wiz, AI-driven development practices
Technologies
Veracode, SonarQube, Wiz, Bash, Ansible, Terraform, Microsoft Office
Responsibilities
Provide strategic oversight for application security platforms and secure coding practices; Guide teams in interpreting security findings and prioritizing risk-based remediation; Integrate AI tools into engineering workflows to enhance security coverage and productivity; Educate and coach development teams on security policies and secure coding; Produce KPI-based reporting on security posture and adoption metrics; Drive onboarding of new applications into security platforms.
Seniority
Staff, strategic oversight with hands-on guidance
