Senior Application Security Engineer
Core
Identify application security weaknesses through penetration testing, vulnerability scanning, and code reviews; build security tooling and CI/CD integrations; establish safe usage practices for LLMs and agents.
Role type
Senior IC application security engineer
Builds
Security tooling, CI/CD integrations, internal services, and AI-assisted workflows
Domain
Application security, DevSecOps, AI security
Deliverable
production ML models
Required skills
Penetration testing, vulnerability scanning, code reviews, SAST/DAST/SCA strategies, LLM/agent/MCP tooling, secure coding practices, vulnerability remediation, CI/CD pipeline integration, cloud platform experience, scripting (Python/JavaScript/Ruby)
Preferred skills
AWS experience, Bachelor's degree in Computer Science
Technologies
SAST, DAST, SCA, LLMs, agents, MCP, CI/CD, AWS
Responsibilities
Perform penetration testing, vulnerability scanning, and code reviews; Collaborate with development teams on vulnerability remediation; Define and implement SAST, DAST, and SCA testing strategies; Build security tooling, CI/CD integrations, and AI-assisted workflows; Maintain application security policies and procedures; Research and evaluate application security tools; Monitor application security metrics; Participate in application security incident response; Promote a security-first culture
Seniority
Senior, hands-on IC
