Senior Application Security Engineer
Core
Senior Application Security Engineer securing Windows applications, managing bug bounty programs, and integrating security tooling into CI/CD pipelines.
Role type
Senior IC application security engineer
Builds
Secure Windows, macOS, iOS, and Android applications; CI/CD security automation
Domain
Cybersecurity, Application Security, Cloud Security
Required skills
Bug bounty program management, SAST/DAST/SCA tooling, GitHub Actions, Windows desktop application security, C/C++/C#/Java, threat modeling, code review
Preferred skills
Red teaming, CISSP/CEH/GIAC Reverse Engineering, AWS, Terraform, macOS/iOS/Android security, digital forensics, security architecture
Technologies
GitHub, GitHub Actions, GitHub Advanced Security, SAST, DAST, SCA, AWS, Terraform, C, C++, C#, Java
Responsibilities
Automate security processes and tooling within the CI/CD pipeline; Manage and collaborate on external security-focused code reviews and penetration tests; Triage security issues and consult teams on severity and resolution; Conduct threat modeling and design reviews; Administer and support the ongoing bug bounty program; Validate reported vulnerabilities and verify fixes; Promote security best practices and foster a secure development culture
Seniority
Senior, hands-on IC
