Shield AI
Staff Application Security Engineer (R5949)
$143K–$214K
Remote · Remote · Staff · Full-time · Posted Sep 23, 2026
- Experience
- 7+ years; no alternatives stated.
About the job
Establishes and leads a developer-centered application security and secure software supply-chain program, embedding practical security controls across engineering workflows.
What you'll do
- Set company-wide secure SDLC policies, standards, and improvement roadmaps; develop developer guidance and enablement.
- Implement and tune application-security tooling, partner with teams on findings and remediation, and lead threat modeling and design reviews.
- Mature vulnerability, open-source, CI/CD, software supply-chain, incident-response, and security-metrics processes.
What they ask for
- 7+ years of experience in application security, product security, DevSecOps, secure software engineering, cybersecurity engineering, or a closely related field.
- Experience designing or maturing a secure SDLC or application-security program across multiple engineering teams and working directly with developers.
- Hands-on experience with SAST, DAST, SCA, dependency vulnerability management, secrets scanning, and integrating security controls into software delivery workflows.
- Experience with threat modeling or security design reviews, software supply-chain security, and open-source software risk management.
Nice to have
- Experience implementing SLSA practices, signed attestations, build provenance, or release-integrity controls.
- Experience with VEX, CSAF, SPDX or CycloneDX, cloud-native security, security tools, or regulated environments.
Pay
USD 143,000–214,000 per-year-salary (base salary)
Tools
NIST SP 800-218, OWASP SAMM, SLSA, SAST, DAST, SCA, SPDX, CycloneDX
Model-written summary · the original posting is authoritative