Staff Application Security Engineer
Core
Primary owner of security and integrity for company applications and software systems, building vulnerability management pipelines and executing the application security program.
Role type
Staff Application Security Engineer
Builds
Vulnerability management CI/CD pipeline, SIEM configurations, security frameworks and tooling
Domain
Application Security, Cloud Security, TravelTech
Required skills
SIEM management, Container security (Docker/Kubernetes), SAST/DAST/IAST tools, Secure coding practices, OWASP Top 10, Mitre Top 25, Cloud security concepts, Compliance frameworks (SOC 2, PCI), Programming languages (Ruby, Java, Python, C#, Node.js), Incident response, Penetration testing
Preferred skills
Mentoring, Cross-functional collaboration, Analytical problem solving
Technologies
SIEM, Docker, Kubernetes, SAST, DAST, IAST
Responsibilities
Configure and tune SIEM solutions for threat detection; Perform architecture, code, and infrastructure reviews; Maintain vulnerability management CI/CD pipelines; Partner with engineering teams to enforce secure coding practices; Build and maintain enterprise security frameworks and tooling; Lead incident response and forensic investigations; Develop security training and guidance for development teams
Seniority
Staff, hands-on IC with strategic ownership