Staff Application Security Engineer
Core
Lead multi-year application security strategy, shape roadmaps for Engineering/Product/Platform/Data, and drive adoption of secure design and AI-augmented security workflows.
Role type
Staff Application Security Engineer (Strategy & Hands-on IC)
Builds
Secure architecture, authorization patterns, OAuth/token handling, SSRF-safe clients, and AI system security controls.
Domain
Application Security, Cloud Security, AI Security
Deliverable
production ML models
Required skills
Application security strategy, code review, penetration testing, exploit development, vulnerability analysis, secure architecture design, authentication/authorization patterns, AI system security, risk modeling, threat modeling, Linux, cloud fundamentals (GCP, Kubernetes), Ruby on Rails, Python
Preferred skills
Leading security for AI-native products, scaling security champions programs, public security research (CVEs), OSCP/OSWE certifications
Technologies
Ruby, Ruby on Rails, Python, GCP, Kubernetes, OAuth, SSRF-safe HTTP clients
Responsibilities
Lead security architecture reviews and threat modeling for high-scale systems; Design and drive adoption of shared authorization and secure token handling; Guide vulnerability management across bug bounty programs and penetration tests; Perform hands-on code review, exploit development, and bypass testing; Build and standardize AI-augmented AppSec workflows; Define security controls for AI systems and agent features; Mentor senior engineers and security champions.
Seniority
Staff, hands-on IC with strategic leadership
