Senior Application Security Engineer

Job Summary

Focused on enhancing application security, the full-time Senior Application Security Engineer will run and automate the vulnerability pipeline, identify and eliminate bug classes, and collaborate with engineering teams to implement secure practices in a remote environment.

Key responsibilities

• Triage, validate, route, and drive remediation of findings from various sources, including SAST, DAST, and bug bounty programs
• Identify patterns in vulnerabilities and implement secure defaults and custom static analysis rules to prevent recurrence
• Conduct hands-on testing and threat modeling for applications and APIs, ensuring robust security practices across engineering teams

Required qualifications

• Proven experience in end-to-end vulnerability management and automation using code against scanner, ticketing, and source-control APIs
• Strong engineering background with proficiency in coding languages such as Go, Python, Node.js, Ruby, or Java
• Deep understanding of the OWASP Top 10, particularly in broken access control and business logic flaws
• Experience with SAST, DAST, and SCA integration in CI/CD pipelines, alongside cloud fundamentals on GCP or AWS
• Ability to effectively communicate and influence across teams and time zones, demonstrating strong judgment in security matters