Sr. Application Security Engineer
Core
Sr. Application Security Engineer embedded in engineering teams to design, build, and ship secure software on AWS, Vercel, C# .NET, TypeScript, and React/Next.js.
Role type
Senior IC application security engineer
Builds
Secure web applications and cloud-native architectures
Domain
Cloud security, web application security, secure SDLC
Required skills
C# .NET, TypeScript, JavaScript, SQL, threat modeling, secure code review, SAST/DAST/SCA integration, CI/CD pipeline security, OWASP Top 10, API security, authentication/authorization, AI security risks, risk-based decision making
Preferred skills
Next.js, Vercel, serverless architectures, security frameworks (OWASP ASVS, NIST 800-53, CIS v8, PCI DSS, SOX), bug bounty program management
Technologies
AWS, Vercel, GitHub, TeamCity, SQL Server, React, Next.js, TypeScript, C# .NET
Responsibilities
Conduct security architecture and design reviews, perform threat modeling and code reviews, mature Secure SDLC with automated checks, build security tooling and automation, lead security champions program, mentor engineers on secure development, align applications with compliance standards (SOC 1, SOX, PCI DSS), evaluate AI tool risks
Seniority
Senior, hands-on IC
