Senior Engineer, Application Security

About this role

Hi there! Thanks for stopping by 👋 Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! As a Senior Application Security Engineer, you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation.

Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors. What you’ll be doing: - Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows.

- Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines. - Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations. - Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active.

- Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, systematically burning down security backlogs. - Provide hands-on technical fix guidance to developers for complex structural flaws and web application vulnerabilities. - Drive developer security enablement across the organization—championing our Security Champions program and delivering engaging, impactful secure coding workshops.

- Partner closely with Platform and Infrastructure Security teams to build frictionless, automated guardrails into CI/CD pipelines. What you need to bring: - Deep, hands-on experience in Application Security, Product Security, or Secure Software Engineering in high-growth cloud environments. - Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience. - Deep understanding of web application vulnerabilities (OWASP Top 10), business logic flaws, and secure coding practices.