Senior Application Security Engineer

Job Summary

To help secure the cloud marketplace and financial platforms, the full-time remote Senior Application Security Engineer will partner with engineering teams to influence secure design, lead threat modeling efforts, and conduct hands-on code reviews while managing the vulnerability lifecycle.

Key responsibilities

• Act as a trusted security partner to product teams, influencing secure design and implementation
• Lead practical threat modeling and conduct hands-on code and design reviews to identify security issues
• Own the vulnerability lifecycle, prioritizing findings from various security testing tools and collaborating with engineering teams for remediation

Required qualifications

• Substantial experience in application or product security, particularly with software engineering teams
• Deep expertise in threat modeling and manual code review for web and microservice environments
• Hands-on experience with application security tooling, including source-code analysis and dynamic testing
• Proficiency in at least one modern cloud-native programming language, such as Kotlin or JavaScript/TypeScript
• Working knowledge of Amazon Web Services, Kubernetes, and infrastructure as code