Senior Application Security Engineer

We are looking for a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. This person will deploy and tune SAST, DAST, and IAST tools, conduct threat modeling, and integrate security controls into CI/CD pipelines.

What You Will Do

Deploy and tune code scanning solutions, interpret code scanning results, perform threat modeling, collaborate with technology stakeholders, steer the development of security tools, and ensure processes are documented and maintained.

Why It Might Be a Fit

The ideal candidate will have strong hands-on Application Security experience, a software engineering foundation, and experience with SAST, DAST, and IAST tools. They will also have experience with threat modeling, CI/CD pipelines, and cloud infrastructure such as AWS.

Requirements

• Authorized to work for ANY employer in the US
• Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
• Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
• Ability to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities
• Strong communication and influence skills: able to explain complex security issues clearly to engineers, engineering leaders, and nontechnical stakeholders
• Collaborative, solutions-oriented approach; must be able to build trust with development teams and improve security without unnecessarily slowing product delivery
• Upper-intermediate English level

Benefits

• Professional growth: Mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: USD-based pay with education, fitness, and team activity budgets
• Exciting projects: Modern solutions with Fortune 500 and top product companies
• Flextime: Flexible schedule with remote and office options