Senior Application Security Engineer

Job Summary

Building secure tooling and patterns, the full-time Senior Application Security Engineer will manage the AppSec tooling stack, automate security processes, and collaborate with product engineering and DevOps teams in a remote environment.

Key responsibilities

• Develop secure-by-default patterns and integrate security into existing pipelines and frameworks
• Own and optimize the application security tooling stack, including SAST, DAST, and secrets scanning
• Mentor engineers and security champions, enhancing overall application security practices across the organization

Required qualifications

• 4+ years in application security or secure software development, with a relevant bachelor's or master's degree or equivalent experience
• Proven experience in shipping security tooling and automation, beyond using off-the-shelf tools
• Expertise in threat modeling, security design reviews, and manual code reviews
• Proficiency in programming languages such as Java, Kotlin, C#, or Python
• Hands-on experience with cloud-native security, including AWS, GCP, Azure, and Kubernetes