Senior Application Security Engineer
Core
Ensure the security of Via's applications throughout the software development lifecycle by identifying vulnerabilities, promoting secure coding, and building a robust application security program.
Role type
Senior Application Security Engineer (IC)
Builds
Security tooling, automation (CI/CD integrations), and AI-assisted workflows for vulnerability triage and detection
Domain
Application Security / Transportation Technology
Deliverable
production ML models
Required skills
Application security concepts (OWASP, CWE, SANS), SAST/DAST/SCA tools, scripting (Python/JS/Ruby), secure coding practices, CI/CD pipelines, cloud platforms (AWS)
Preferred skills
AI/LLM/agents/MCP tooling for security workflows, penetration testing, incident response
Technologies
SAST, DAST, SCA, CI/CD, AWS, LLMs, agents, MCP
Responsibilities
Perform security assessments (penetration testing, vulnerability scanning, code reviews); Collaborate with dev teams to remediate vulnerabilities; Define and implement security testing strategies; Design and build security tooling and automation; Research and evaluate new security tools; Monitor security metrics and report on posture; Participate in incident response; Champion security-first culture
Seniority
Senior, hands-on IC
