Application Security Engineer

Job Summary

To lead the development and maturation of the Application Security program, the full-time Staff Engineer, Application Security will design and implement security practices within a cloud-native DevSecOps environment, collaborating with engineering and security teams to integrate security tools and oversee code reviews and threat modeling.

Key responsibilities

• Design, implement, and scale the Application Security Program, aligning with Secure SDLC best practices
• Conduct and oversee escalated code reviews, security assessments, and penetration testing of applications
• Lead threat modeling workshops and security training initiatives for developers and architects

Required qualifications

• Demonstrated experience building or leading a successful Application Security Program in a technology-driven organization
• Deep technical knowledge of web and mobile vulnerabilities, microservices security, and cloud-native architectures (preferably AWS)
• Strong proficiency with security testing tools such as Burp Suite and Snyk
• Hands-on experience securing CI/CD environments and collaborating with DevOps teams
• Industry certifications such as OSWE, GWAPT, or CISSP are a plus