Lead Application Security Engineer
Core
Lead Application Security Engineer building and advancing application security capabilities for ocean energy technology software.
Role type
Lead Application Security Engineer
Builds
Secure software for ocean energy nodes and related services
Domain
Renewable energy / Ocean technology
Required skills
Application Security processes, Threat modeling, Secure code review, Penetration testing, OWASP Top 10, CWE Top 25, SAST/DAST/SCA tools, Secrets management, CI/CD integration, AI security agents
Preferred skills
Mechanical engineering software experience, Cloud platforms (AWS/Azure/GCP), Docker, Kubernetes, Infrastructure as Code
Technologies
Snyk, GitHub Advanced Security, Burp Suite, Fortify
Responsibilities
Build AppSec function, Conduct code/architecture reviews, Lead threat modeling, Define security metrics, Assist in hiring, Incident response support, Integrate security tools in CI/CD, Build agentic security tools, Perform secure code reviews and pen testing, Manage bug bounty programs
Seniority
Senior, hands-on IC with team lead responsibilities
