Senior Application Security Engineer

What you'll do

• Mature the application security program and embed secure-by-default practices, threat modeling, and automated checks into the SDLC.
• Automate red-teaming, threat hunting, vulnerability management, and application and software supply chain security tooling.
• Advise enterprise customers and leadership on product security posture, assurance, and audit matters.

What they ask for

• Deep command of application and product security fundamentals, including assessing exploitability.
• Experience embedding security into the SDLC and scaling security processes adopted by engineering teams.
• Experience managing vulnerabilities in shipped software at scale, including container/image security and JVM dependency and supply chain risk.
• Offensive security experience in red-teaming or threat hunting against products.

Nice to have

• Enterprise B2B software and direct customer security experience, ideally in regulated industries such as financial services.
• Threat modeling distributed systems and data platforms; experience leading and mentoring engineers.

Pay

$175,000 — $215,000 USD (salary range; may include variable compensation such as commission or bonus)

Tools

SAST, SCA, DAST, JVM

AI focus

Use AI and automation to scale defensive security, including autonomous red-teaming and threat hunting, and embed security into AI-assisted development.