Senior AppSec Engineer – Cloud, API & Software Supply Chain
Core
Securing modern cloud-native applications by embedding security into the SDLC, focusing on API security, Infrastructure as Code, containerized workloads, and Open-Source Software supply chain.
Role type
Senior IC Application Security Engineer (Cloud & API)
Builds
Secure-by-design cloud-native applications, APIs, and infrastructure for semiconductor manufacturing equipment
Domain
Semiconductor manufacturing / Cloud Security / Software Supply Chain
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
API security design and testing, IaC security (Terraform, ARM, CloudFormation), Container and Kubernetes security, Open-Source Software (OSS) risk management, CI/CD pipeline integration, Cloud platforms (AWS, Azure, GCP)
Preferred skills
AppSec tooling (SAST, DAST, SCA), Zero Trust architecture, DevSecOps practices, AI/ML security (prompt injection, data leakage)
Technologies
Terraform, ARM, CloudFormation, Kubernetes, Helm, OAuth2, OIDC, JWT, mTLS, AWS, Azure, GCP
Responsibilities
Establish and mature API security programs and guidelines; Review and assess IaC templates for misconfigurations; Assess container images and Kubernetes manifests for vulnerabilities; Manage open-source risk including vulnerabilities and licensing; Embed security checks into CI/CD pipelines; Partner with engineering teams to remediate infrastructure and application risks
Seniority
Senior, hands-on IC