Staff Application Security Engineer

What you'll do

• Lead and continuously improve vulnerability management and other application security programs, including reducing remediation time and scaling detection and response automation.
• Set technical and architectural direction, partner with engineering teams to drive remediation, and communicate risk and tradeoffs to leadership.
• Mentor engineers and participate in incident investigations and on-call critical vulnerability response.

What they ask for

• 10+ years of relevant experience as a cloud or security engineer, including hands-on vulnerability management across a broad, multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript; strong AWS cloud services background.
• Experience setting technical and architectural direction for a security program and driving remediation across multiple surfaces without direct authority.
• Significant experience with vulnerability management tooling and scoring frameworks such as CVSS and EPSS; deep understanding of SAST, DAST, and SCA.

Nice to have

• Experience with C/C++, security automation platforms such as Tines, or serverless frameworks such as AWS Lambda.
• Experience with AI-driven security workflows, CI/CD vulnerability management, SaaS/firmware/corporate IT security, or FedRAMP environments.

Tools

Go, Python, JavaScript, AWS, Wiz, Semgrep, CVSS, EPSS

AI focus

Requires hands-on use of AI/LLM tools in security workflows such as triage, detection logic, and remediation drafting, plus knowledge of AI’s impact on threats and security tooling. Building or extending AI security copilots or agents is preferred.