Senior Application Security Engineer
Core
Senior Application Security Engineer acting as a teacher, advisor, and enabler for development teams to embed secure-by-design thinking across engineering.
Role type
Senior IC application security engineer (secure development enablement)
Builds
Secure SDLC practices, security champions programs, threat modeling sessions, and developer-friendly AppSec guardrails in CI/CD pipelines
Domain
Financial technology, cloud native security, blockchain security
Required skills
Application security, cloud security (AWS/Azure), secure coding principles, API security, secure design techniques, SAST/SCA/IaC/secret scanning tooling, compliance frameworks (PCI DSS, SOC 2, NIST, OWASP), threat modeling, mentoring and training
Preferred skills
Blockchain security, modern language coding (JavaScript/TypeScript, Python, Go, Java, C#), storytelling and communication
Technologies
AWS, Azure, SAST, SCA, IaC scanners, secret scanning tools
Responsibilities
Mentor and coach developers on secure coding; Lead and scale a Security Champions program; Facilitate threat modeling and design reviews; Integrate AppSec guardrails into CI/CD pipelines; Translate vulnerabilities into actionable remediation guidance; Support security awareness with playbooks and patterns; Partner with compliance teams on documentation
Seniority
Senior, hands-on IC with mentorship focus
