Engine
Staff Application Security Engineer
$183K–$215K
Remote - US · Remote · Staff · Full-time · Posted Oct 4, 2026
About the job
Own and advance Engine’s application security program, including vulnerability management, threat detection, security reviews, incident response, and security tooling.
What you'll do
- Own and tune the SIEM, analyze threats, and develop incident alerts; support incident response and forensic investigations.
- Review application architecture, code, and infrastructure; conduct light web and mobile penetration testing and drive vulnerability remediation.
- Build and maintain vulnerability-management pipelines and security tooling, and partner with teams on secure coding, remediation, and training.
What they ask for
- Strong proficiency in one or more programming languages, such as Ruby, Java, Python, C#, or Node.js.
- Expertise managing SIEM solutions and developing effective alerts.
- Strong knowledge of Docker and Kubernetes, with hands-on automated container vulnerability management experience.
- Mastery of SAST, DAST, and IAST tools, manual validation testing, and secure coding principles including OWASP Top 10 and Mitre Top 25.
Nice to have
- Experience with cloud security concepts and compliance frameworks such as SOC 2 and PCI.
- A track record of clear communication, peer credibility, and mentoring.
Pay
$182,800 — $215,000 USD (base salary)
Tools
Ruby, Java, Python, C#, Node.js, Docker, Kubernetes, SIEM
Model-written summary · the original posting is authoritative