Application Security Engineer

Job Summary

Seeking a full-time Information Security Engineer specializing in Application Security, this remote position involves collaborating with R&D engineers on vulnerability management, threat modeling, and developing internal security tools while contributing to incident response efforts.

Key responsibilities:

• Triage and manage vulnerabilities from various security assessments and testing
• Conduct threat modeling sessions and security reviews for new features and architecture changes
• Develop and enhance internal security tooling, including a CVE registry and automation processes

Required qualifications:

• 3+ years in security or software engineering, with at least 2 years in application or product security
• Experience in a SaaS or software product company, collaborating with engineering teams in CI/CD environments
• Hands-on experience with vulnerability triage tools such as Snyk, Trivy, or CodeQL
• Proficient in threat modeling and design review methodologies, particularly for web apps or APIs
• Ability to read and write code, particularly in Java, and familiarity with AI coding agents for security tasks