Application Security | Application Security Engineer
Core
Implement and operate foundational application security controls, optimize security tooling, and enable security automation at scale to make risks visible and actionable.
Role type
Senior IC Application Security Engineer
Builds
Production security tooling, vulnerability management workflows, and secure development guardrails for enterprise-scale applications
Domain
Cybersecurity / Application Security / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Application security engineering, vulnerability management, SAST/SCA/DAST/API/Container security, WAF management, Python, Go, Policy-as-Code, CI/CD security integration, OWASP Top 10 knowledge, CDN security, cryptographic principles
Preferred skills
AWS, Azure, or GCP cloud-native application security
Technologies
Python, Go, WAF, CDN, SAST, SCA, DAST, OPA, HashiCorp Sentinel, CI/CD pipelines
Responsibilities
Configure and tune application security tools to maximize accuracy and reduce false positives; Establish and maintain security baselines, policies, and scanning rules; Develop risk-based prioritization models for vulnerability remediation; Integrate security tool outputs into centralized vulnerability management workflows; Validate findings and track remediation through closure; Partner with engineering teams to implement security guardrails and secure development practices; Manage and optimize Web Application Firewall (WAF) and CDN security capabilities including DDoS protection and bot mitigation; Perform targeted security assessments of high-risk applications; Develop and maintain technical documentation, operational runbooks, and security standards; Support vulnerability response, remediation activities, and application security incident investigations; Participate in Agile development processes including sprint planning and backlog refinement; Develop metrics and KPIs to measure program effectiveness
Seniority
Mid-Senior, hands-on IC