Security Engineer, Application Security
Core
Embed application security into the SDLC via security-by-design, threat modeling, secure code reviews, and API standards for REST/GraphQL systems.
Role type
Senior IC Application Security Engineer
Builds
Secure CI/CD pipelines, AWS infrastructure, Kubernetes workloads, and internal security developer platforms.
Domain
Cloud Security (AWS), Container Security, API Security, Mobile Security
Deliverable
production ML models | product features | infrastructure
Required skills
Threat modeling, Secure code reviews, CI/CD pipeline integration, AWS security, Kubernetes security, Infrastructure-as-code, Policy-as-code, OWASP Top 10, TypeScript, Swift, Kotlin, iOS/Android secure primitives
Preferred skills
AI/ML-driven security tools, Security developer platforms, Security certifications (AWS Security Specialty, CKS, GWEB, GMOB)
Technologies
AWS, Kubernetes, GitHub Actions, REST, GraphQL, TypeScript, Swift, Kotlin
Responsibilities
Establish secure API patterns and architectural standards, Integrate and maintain security tooling in CI/CD, Operate vulnerability management lifecycle, Coach engineers on secure coding, Track security KPIs and communicate risk insights, Participate in weekly on-call rotation
Seniority
Senior, hands-on IC
