Senior Engineer, Application Security
Core
Senior Application Security Engineer leading the strategic shift to developer-embedded security and Secure by Design operationalization.
Role type
Senior IC application security engineer
Builds
Automated security controls, threat models, and AI-driven vulnerability triage pipelines
Domain
Cloud commerce platform security
Deliverable
production ML models
Required skills
Application Security, Secure Software Engineering, Web application vulnerabilities (OWASP Top 10), SAST/DAST/SCA/Secrets/LLM scanner tuning, Threat modeling, Secure by Design, AI/LLM automation, Python, Go, JavaScript/TypeScript, Java
Preferred skills
Security Champions program leadership, Secure coding workshops, CI/CD pipeline integration
Technologies
SAST, DAST, SCA, Secrets scanners, LLM scanners, CI/CD pipelines
Responsibilities
Operationalize Secure by Design principles in feature designs and pull requests; Architect high-impact threat models; Configure and fine-tune security scanner rulesets; Build and stabilize AppSec processes; Pioneer AI-driven automation for vulnerability triage; Provide hands-on technical fix guidance to developers; Drive developer security enablement; Partner with Platform and Infrastructure Security teams
Seniority
Senior, hands-on IC
