Senior Application Security Engineer

We are looking for a Senior Application Security Engineer to strengthen secure coding and DevSecOps practices across engineering teams. This person deploys and tunes SAST, DAST, and IAST tools, conducts threat modeling, and integrates security controls into CI/CD pipelines.

What You Will Do

Deploy and tune code scanning solutions such as SAST, DAST, and IAST. Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities. Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.

Why It Might Be a Fit

You will be a part of a bleeding-edge security organization that enables the agile development of secure and reliable applications and products. You will have the opportunity to work with a team that values professional growth, competitive compensation, and exciting projects.

Requirements

• Authorized to work for ANY employer in the US
• Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
• Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages
• Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus
• Demonstrated experience conducting threat modeling and translating findings into practical security requirements
• Experience integrating security testing and controls into CI/CD pipelines and developer workflows
• Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
• Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
• Upper-intermediate English level

Benefits

• Professional growth: Mentorship, TechTalks, and personalized growth roadmaps
• Competitive compensation: USD-based pay with education, fitness, and team activity budgets
• Exciting projects: Modern solutions with Fortune 500 and top product companies
• Flextime: Flexible schedule with remote and office options