Senior Application Security Engineer
Core
Technical owner of application and product security, building secure-by-default patterns, automation, and red-teaming for a distributed data platform serving global banks.
Role type
Senior IC application security engineer (product security)
Builds
Autonomous red-teaming tools, vulnerability management automation, and supply chain security tooling for self-managed enterprise platform and SaaS.
Domain
Enterprise data intelligence, distributed systems, financial services
Deliverable
production ML models | product features | infrastructure
Required skills
Application security fundamentals, SDLC security integration, vulnerability management at scale, container/image security, supply chain security, offensive security/red-teaming, threat modeling, automation engineering, enterprise B2B security
Preferred skills
AI/ML for security automation, regulated industry experience, mentoring engineers
Technologies
Trino, Apache Iceberg, SAST, SCA, DAST, container scanning, JVM
Responsibilities
Own and mature the Application Security program; Shift security left into the SDLC; Build autonomous red-teaming and threat hunting; Own vulnerability management for shipped software; Own application and supply chain security tooling; Be the security voice with customers and leadership
Seniority
Senior, hands-on IC
