Lead Application Security Engineer
Core
Lead the application security function by building secure software, conducting threat modeling, and integrating security tools into CI/CD pipelines for a renewable energy and ocean technology company.
Role type
Senior IC application security engineer (team lead)
Builds
Secure application architectures and automated security tooling
Domain
Renewable energy / Ocean technology / Software security
Required skills
Application security processes, OWASP Top 10, CWE Top 25, secure design patterns, SAST/DAST/SCA tools, CI/CD integration, threat modeling, secure code reviews, penetration testing, AI systems and agents
Preferred skills
Software development in mechanical engineering environments, AWS/Azure/GCP, Docker, Kubernetes, Infrastructure as Code
Technologies
AI, AWS, Azure, CI/CD, Docker, GCP, GitHub, Kubernetes, NodeJS, Cloud
Responsibilities
Review code and service architectures, lead threat modeling, define software security metrics, support security team interviews and onboarding, assist with incident response, integrate and automate security tools in CI/CD, perform secure code reviews and penetration testing, manage vulnerability disclosure programs
Seniority
Senior, hands-on IC with management responsibilities
