Senior Application Security Engineer
Core
Own and evolve the vulnerability management program, integrate security gates into DevOps workflows, and lead application security strategy and threat modeling.
Role type
Senior IC application security engineer
Builds
Secure software development pipelines and scalable security tooling
Domain
Application security and DevSecOps
Deliverable
production ML models
Required skills
Vulnerability management, threat modeling, secure coding standards, SAST/DAST/SCA/IaC scanning, software supply-chain security, OWASP Top 10, authentication/authorization, cryptography, API security, cloud-native security, AI-assisted security tooling
Preferred skills
GCP, blockchain/Web3 security, SOC 2, PCI DSS, GLBA
Technologies
Go, Python, TypeScript/JavaScript, Java, Kotlin, Semgrep, Snyk, Socket
Responsibilities
Triage and prioritize vulnerabilities, integrate security automation into CI/CD, manage third-party penetration tests, lead security design reviews, mentor engineers and build security champions program, evaluate security tooling, track security metrics, participate in incident response, use AI for threat hunting and code analysis
Seniority
Senior, hands-on IC
