Security Engineer Application Security
Posted Updated
Description
You will embed security into product development, conduct threat modeling and security assessments, build automated application-security controls, review code, secure AI data and model environments, and help teams remediate vulnerabilities.
Responsibilities
- Conduct threat modeling and design secure architectures
- Build and evolve the application security program
- Establish and maintain SAST and DAST scanning in CI/CD pipelines
- Conduct security code reviews and build vulnerability-detection automation
- Create secure coding standards, reusable patterns, and libraries
- Lead security assessments and penetration testing
- Design security controls for data pipelines, model training environments, and AI agents
- Research AI and LLM attack vectors and build defenses
Requirements
- 4+ years of hands-on application security engineering experience
- Understanding of developer workflows and developer experience
- Expertise in at least two of Python, Java, Go, JavaScript, or TypeScript
- Knowledge of SAST, DAST, vulnerability management, security testing frameworks, and DevSecOps
- Ability to read and review code across multiple languages
- Excellent communication skills
- Experience reducing risk through automation and scalable security practices
Benefits
- Generous PTO and company holidays
- Comprehensive medical and dental insurance
- 16 weeks of paid parental leave
- Fertility and family planning support
- Early-detection cancer testing
- Pension scheme with company contribution
- Wellness stipend
- Learning and development stipend
- Company-wide and team off-sites
- Company stock options
