Staff Application Security Engineer

What you'll do

• Define and improve vulnerability management and other application security programs, including automation to scale detection and response and reduce remediation time.
• Set program architecture and execution direction; guide engineering teams through remediation and communicate risk tradeoffs to leadership.
• Mentor engineers, investigate high-profile vulnerabilities, and provide on-call support for critical vulnerability response.

What they ask for

• 10+ years of relevant experience as a cloud engineer or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript; strong AWS cloud services background.
• Significant experience with vulnerability management tooling and familiarity with CVSS and EPSS; deep understanding of SAST, DAST, and SCA.
• Ability to set technical and architectural direction and drive remediation across a broad environment; hands-on use of AI/LLM tooling in security workflows.

Nice to have

• Experience with C/C++, Tines, AWS Lambda, CI/CD vulnerability management, or security across SaaS, firmware, and corporate IT; FedRAMP experience.
• Background at a cloud-native, AI-forward company, or experience building AI copilots/agents for security workflows.

Pay

USD 165,200–295,000 annual base salary

Tools

Go, Python, JavaScript, AWS, Wiz, Semgrep, Tines, AWS Lambda

AI focus

Use AI/LLM tooling for security triage, detection logic, and remediation drafting; speak to AI’s impact on the threat landscape and security tooling. Building AI copilots or agents for security workflows is preferred.