Senior Application Security Engineer
Core
Own security tooling and vulnerability management across SAST, dependency and container scanning, secret detection, and penetration testing; lead security design reviews, threat modeling, and targeted manual code reviews for authentication, authorization, payments, and customer data systems.
Role type
Senior IC application security engineer
Builds
Secure defaults, reusable libraries, automation, developer guardrails, and a security champions practice
Domain
Cloud-native application security (AWS)
Deliverable
production ML models | product features | infrastructure
Required skills
Java, TypeScript, threat modeling, secure system design, authentication, authorization, access control, injection prevention, SSRF prevention, manual code review, AWS IAM, multi-account architecture, containerized workloads, CI/CD security, vulnerability management
Preferred skills
SOC 2, PCI DSS, GDPR
Technologies
AWS, SAST, container scanning, secret detection
Responsibilities
Own security tooling and vulnerability management; lead security design reviews and threat modeling; identify and prevent multi-tenant authorization vulnerabilities; strengthen AWS security through IAM and workload protection; build secure defaults and automation; set application security standards and drive remediation
Seniority
Senior, hands-on IC
