N
Senior Application Security Engineer
Not specifiedFull-timeSecurity EngineeringEnterprise SoftwareData Infrastructure
Lead application security for a large-scale AI cloud platform. Own application security posture management, secure SDLC practices, vulnerability management, and security automation while partnering with development teams.
Responsibilities
- Build and maintain application security posture management at company scale
- Automate and support SAST and software composition analysis tools in CI/CD pipelines
- Improve SAST and secrets-detection rules while minimizing false positives
- Identify, analyze, and remediate application security vulnerabilities
- Integrate security best practices into the software development lifecycle
- Develop and maintain secure coding guidelines
- Conduct threat modeling and risk assessments for applications
- Provide development teams with tools for threat modeling and vulnerability detection
- Serve as an application security subject matter expert
- Monitor emerging security threats, vulnerabilities, and mitigation techniques
Requirements
- 6+ years of application security experience
- Strong knowledge of common application security risks, including the OWASP Top 10
- Experience with secure coding in Python, Go, Java, or JavaScript
- Proficiency in a programming language such as Go or Python, with willingness to learn Go
- Hands-on experience with Burp Suite, ZAP, Semgrep, or similar security testing tools
- Understanding of SAML or OIDC authentication protocols
- Experience conducting threat-modeling sessions
- Applicants must be authorized to work in the country of application
Nice to have
- Experience designing, building, and maintaining security automation
- Experience translating compliance and regulatory requirements into technical specifications
- Experience exploiting vulnerabilities in web applications, Linux kernels, containers, and networks
- OSCP or OSWE certification
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexible work and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams