Security Engineer (Application Security)
Core
Lead application security engineering, assessment, and secure software development practices across cloud-native, web, API, containerized, and microservices-based applications.
Role type
Senior IC Application Security Engineer (DevSecOps)
Builds
Secure cloud-native applications and DevSecOps pipelines
Domain
Cloud Security / Application Security
Required skills
Application Security Testing (SAST/DAST/SCA), Secure Code Review, Threat Modeling, Risk Assessment, Cloud Security (AWS/Azure/Kubernetes), Infrastructure as Code (Terraform/Docker/Helm), DevSecOps Pipelines, Vulnerability Management, Compliance (HIPAA/HITRUST/FedRAMP), Python/Java/JavaScript/TypeScript
Preferred skills
Generative AI literacy, Advanced AI tooling
Technologies
Burp Suite, OWASP ZAP, Checkmarx, Veracode, Fortify, GitHub Advanced Security, SonarQube, Postman, SoapUI, Snyk, Mend, Black Duck, Dependabot, JFrog Xray, Cortex Cloud, Prisma Cloud, Tenable, Wiz, Aqua Security, Trivy, Microsoft Defender for Cloud, ServiceNow, GitHub Actions, Azure DevOps, Jenkins
Responsibilities
Interpret engineering and operational guidance within the security domain, Lead creation of comprehensive roadmaps for projects, Champion operational excellence via process improvement, Drive cost optimization, Enhance security risk visibility through risk management frameworks, Participate in incident response and maintain security architecture
Seniority
Senior, hands-on IC