Senior Information Security Engineer - Application Security
Core
Senior Information Security Engineer responsible for embedding security into the SDLC, managing vulnerability programs, and performing secure architecture reviews for a SaaS platform.
Role type
Senior IC Application Security Engineer
Builds
Secure Java services and SaaS platform features
Domain
Enterprise software / Application Security
Deliverable
production ML models | product features | infrastructure
Required skills
Secure software development (Java), CI/CD security integration (SAST/DAST/SCA), threat modeling, vulnerability management, incident response
Preferred skills
Python/JavaScript/TypeScript, Kubernetes security, B2B multi-tenant experience, security training
Technologies
Java, CI/CD pipelines, SAST, DAST, SCA, container scanning, Kubernetes
Responsibilities
Partner with engineering to embed security by design throughout the SDLC; Lead and evolve AppSec tooling (SAST, DAST, SCA, container scanning) within CI/CD; Drive vulnerability management and supply chain security; Perform secure design reviews and threat modeling for distributed systems; Support application-layer security incidents and escalations
Seniority
Senior, hands-on IC
