Sr. Security Engineer
Core
Senior Application Security Engineer embedded in the development lifecycle to build security in from the start, acting as a trusted partner to engineering and product teams.
Role type
Senior IC application security engineer
Builds
Secure software development lifecycle (SSDLC), security tooling, automation for CI/CD pipelines, and secure design reviews
Domain
SaaS, cloud-native architectures, AI security
Deliverable
production ML models
Required skills
Application security architecture, risk-based vulnerability prioritization, secure development lifecycle (SSDLC), white-box penetration testing, CI/CD security integration, OWASP Top 10, API security, authentication/authorization, AWS, modern web frameworks, AI security (agentic systems, MCP, LLM workflows)
Preferred skills
Security frameworks (OWASP ASVS, NIST 800-53, SOC 2, GDPR), bug bounty program management, OSCP/BSCP/GWEB/PNPT certifications
Technologies
AWS, CI/CD pipelines, modern web frameworks
Responsibilities
Conduct security architecture and design reviews; Drive risk-based approach to application security; Serve as subject matter expert; Mentor engineers on secure development; Build partnerships with product and engineering; Mature SSDLC; Ensure AI tools are implemented within acceptable risk limits; Develop scalable security tooling and automation; Lead security champions program
Seniority
Senior, hands-on IC
