Senior Application Security Engineer
Core
Own and mature the application security program, including scanning pipelines, penetration testing, and executive reporting on security metrics.
Role type
Senior Application Security Engineer (Program Ownership)
Builds
Security scanning stack, metrics frameworks, and executive reporting narratives
Domain
Application Security / Cloud Security
Required skills
Application security program ownership, SAST/DAST/SCA tooling, vulnerability management, penetration testing coordination, security metrics definition, container security, AWS security services
Preferred skills
Executive reporting experience, threat modeling frameworks, AI/ML security testing, PCI DSS familiarity
Technologies
DefectDojo, Wiz, AWS
Responsibilities
Define and own the AppSec metrics framework, maintain the security scanning stack, lead third-party penetration testing engagements, establish PR security review practices, implement container and supply chain security policies
Seniority
Senior, hands-on IC with program ownership
