Senior Application Security Engineer
Core
Senior Application Security Engineer responsible for risk classification, vulnerability management, and enabling secure development for Canvas, Mastery, and Parchment products.
Role type
Senior IC Application Security Engineer
Builds
Secure application code, dependencies, APIs, and CI/CD pipelines for educational products
Domain
EdTech / Application Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
risk classification, severity adjudication, vulnerability triage, compensating controls design, false-positive analysis, CI/CD security automation, threat modeling, secure code review, SAST/SCA pipeline ownership, developer enablement, technical specification review
Preferred skills
experience with Snyk, CodeQL, Wiz Code, bug bounty program coordination, translating technical risk for product managers
Technologies
Snyk, CodeQL, Wiz Code
Responsibilities
Determine risk context for findings, drive remediation or design compensating controls, automate security gates in CI/CD, conduct threat modeling and secure code reviews, partner with product teams on risk prioritization, support major incident escalation as SME
Seniority
Senior, hands-on IC
