Information Security Engineer - Application Security
Core
Application Security Engineer focusing on threat modeling, vulnerability triage, and building internal security tooling using AI agents.
Role type
Senior IC Application Security Engineer
Builds
Internal security tools (CVE registry, LLM-assisted workflows) and secure software features
Domain
SaaS / Enterprise Software / AI Security
Deliverable
production ML models
Required skills
Application security, threat modeling, vulnerability triage, code review, Java, AI coding agents, CI/CD, container security
Preferred skills
Python, JavaScript, Kubernetes, open-source/B2B security, LLM security risks
Technologies
Snyk, Trivy, Semgrep, CodeQL, Java, Python, JavaScript, Camunda, Remote.com
Responsibilities
Triage vulnerability findings from scanners and external reports; conduct threat modeling and design reviews with R&D; use LLMs to review code and validate findings; build internal security automation tools; review pull requests and answer security questions; participate in on-call rotation and incident response.
Seniority
Senior, hands-on IC
