Fortinet
Sr Applications Security Engineer
$170K–$240K
Sunnyvale, CA · Hybrid · Senior · Full-time · Posted Oct 23, 2026
- Experience
- 5+ years as an Information Security Researcher or Engineer; 3+ years of source-code auditing or programming experience.
- Education
- BS degree in Computer Science, Cyber Security, another tech-related degree, or equivalent experience.
- Visa sponsorship
- Must be authorized to work in the U.S. without sponsorship.
About the job
Conduct application security reviews and testing, guide development teams on secure practices, and manage vulnerability mitigation and responsible disclosure.
What you'll do
- Perform code reviews, penetration tests, and architectural reviews; advise teams on SDLC best practices.
- Drive static and dynamic application security testing and develop application security tools, processes, and controls.
- Manage externally reported vulnerabilities and communicate mitigation strategies to development teams.
What they ask for
- 5+ years of work experience as an Information Security Researcher or Engineer.
- 3+ years auditing source code for security issues or programming in Java, .NET, Python, or JavaScript frameworks.
- Experience in application penetration testing, security code review, and application security testing tools and processes.
- BS degree in Computer Science, Cyber Security, another tech-related degree, or equivalent experience.
Nice to have
- Experience with CSPM and/or ASPM tools; mobile application penetration testing.
- OSWE, OSCP, GWEB, GPEN, or similar certification.
Pay
$170,000-$240,000 USD base salary
Tools
Java, .NET, Python, JavaScript, DAST, SAST, IAST, SCA
AI focus
Requires understanding of AI&ML and LLM concepts, including RAG, Agentic Workflows, MCPs, Skills, AI Red Teaming, AI Guardrails, and secure AI development and deployment strategies.
Model-written summary · the original posting is authoritative