Sonar
Application Security Engineer
Austin, Texas · On-site · Full-time · Posted Sep 1, 2026
- Experience
- No specific number of years stated.
About the job
Leads application security, cloud security, security assurance, and customer trust work, while supporting security incident response as needed.
What you'll do
- Partner with product and engineering teams to review architectures and AWS environments and incorporate security requirements into designs.
- Lead security assessments, penetration tests, red-team exercises, vulnerability remediation, and customer security investigations.
- Monitor threat intelligence, improve and automate security processes, and support incident response, including occasional on-call participation.
What they ask for
- Extensive experience with application and cloud architectures, predominantly AWS.
- Extensive experience conducting application security assessments, including code review and assessment of authentication and authorization designs.
- Experience assessing and securing AI and agentic AI capabilities, applying threat modeling such as STRIDE, and conducting penetration tests, red-team engagements, and bug-bounty programs.
- Experience investigating and managing vulnerabilities and using AI to automate repeatable security work.
Nice to have
- Familiarity with Azure, GCP, and Google Workspace.
Tools
AWS, Azure, GCP, Google Workspace, STRIDE
AI focus
Assess and secure AI and agentic AI capabilities; use AI to automate repeatable security work.
Model-written summary · the original posting is authoritative