Principal Engineer - Application Security (AI security, Pen Testing, DevSecOps)

What you'll do

• Lead application security practices, including SSDLC, security testing, threat modeling, penetration testing, and vulnerability remediation.
• Build security tooling and automation integrated into CI/CD workflows; develop the program roadmap, guidance, and effectiveness metrics.
• Partner with engineering and security teams, influence technical decisions, and mentor engineers on secure development.

What they ask for

• 10+ years of experience in software engineering, application security, or related security engineering roles.
• BS/MS in Computer Science, Information Security, Engineering, or equivalent industry work experience.
• Expertise across SSDLC, SAST, DAST, SCA, Threat Modeling, and Penetration Testing; strong software development experience in one or more modern programming languages.
• Experience with CI/CD and DevSecOps, scaling application security programs, AI-enabled solutions and their governance, and securing cloud-native applications.

Nice to have

• Experience with Kubernetes, containers, APIs, microservices, custom security tooling, and software supply chain security.
• CISSP, CSSLP, GIAC, OSCP, or cloud security certifications.

Pay

USD $168,000.00 - $303,000.00 base salary

Tools

SSDLC, SAST, DAST, SCA, CI/CD, AWS, Azure, Google Cloud

AI focus

Use AI and generative AI to improve application security processes, automate repetitive tasks, enable developers, and accelerate vulnerability detection and remediation, with responsible and secure use and attention to security, privacy, and organizational risk.