Application Security Engineer

Job Summary

To enhance the security posture of products, the full-time remote Application Security Engineer will participate in security design reviews and threat modeling exercises while collaborating with engineering teams to identify and mitigate security risks throughout the software development lifecycle.

Key responsibilities

• Participate in security design reviews and threat modeling exercises for new products and services
• Serve as a security consultant for product and engineering teams, providing guidance on secure implementation patterns
• Develop and enhance tooling and automation to improve the efficiency of threat modeling and security reviews

Required qualifications

• 5+ years of experience in Application Security, Product Security, or a related field
• Strong understanding of common application security vulnerabilities, including OWASP Top 10
• Experience in security reviews, threat modeling, and architecture discussions
• Strong technical writing skills and experience creating documentation and guidelines
• Familiarity with cloud platforms and modern application architectures, preferably AWS