Application Security Engineer

Job Summary

A company is looking for an Engineer III - Product Security (Remote).

Key Responsibilities

• Act as a security expert and advisor to engineering teams, influencing product design and capabilities
• Create and maintain threat models to guide security decisions and reduce threat surface area
• Review application source code for security defects and collaborate with developers to implement solutions

Required Qualifications

• Moderate understanding of software product creation in Agile/DevOps environments
• Experience with threat modeling, particularly using STRIDE
• Code review experience for applications built with Go, Python, or Java
• Knowledge of secure configuration for cloud-native and containerized applications in cloud environments (GCP, Azure, AWS)
• Experience with application security tools such as SAST, DAST, CSPM, DSPM, and ASPM suites