Cybersecurity Security Engineer Sr.
Core
Senior Application Security Engineer focused on policy and platform work to support enterprise application security initiatives, centering on application security posture management, vulnerability analysis, policy implementation, and enabling developers.
Role type
Senior IC application security engineer (policy & platform)
Builds
Enterprise application security posture and secure development lifecycle controls
Domain
Cybersecurity / Application Security
Required skills
Application Security Posture Management (ASPM), Secure SDLC, SAST, SCA, API security testing, DAST, Infrastructure-as-Code security, mobile security testing, vulnerability validation, root-cause analysis, DevSecOps, CI/CD pipelines, automated security controls, code analysis
Preferred skills
Application security tool integration and optimization, security workflow automation, AI-driven security analysis, policy enforcement, GWEB, GWAPT, CSSLP certifications
Technologies
AI, API, CI/CD, DevSecOps, Mobile Security
Responsibilities
Administer and support ASPM platforms and other security tools; Develop and refine security policies for escalating, ticketing, suppressing, and prioritizing vulnerabilities; Analyze and validate SAST and SCA findings, including root-cause analysis and false-positive identification; Work with development teams to offer secure-coding guidance and remediation recommendations; Support Secure SDLC initiatives and DevSecOps practices across application development teams; Assist with platform escalations, vulnerability triage, and security operations; Use automation, APIs, and AI-assisted workflows to improve application security operations.
Seniority
Senior, hands-on IC
