New York Licensed Application Security Engineer

Job Summary

As a Staff Application Security Engineer, the full-time position will own the technical strategy to secure critical attack surfaces, lead architecture reviews, and design AI agents to enhance the secure software development lifecycle, with a hybrid work arrangement based in New York.

Key responsibilities:

• Own and evolve the Gemini Secure Software Development Lifecycle guardrails as an application security subject matter expert
• Lead architecture reviews, threat modeling, code reviews, and penetration testing for high-risk applications and services
• Design and build AI agents throughout the SDLC for automated threat modeling and secure code generation

Required qualifications:

• Proven ability to perform design reviews, threat modeling, secure code reviews, and penetration testing with an attacker mindset
• Strong background in application security best practices and familiarity with common vulnerabilities
• Deep code review proficiency in Scala, Java, Go, or other common languages, with hands-on experience in Python or Go
• Experience implementing custom detection and prevention application security controls beyond OWASP Top 10
• Typically 7-10+ years of experience in application security, product security, or similar roles