Senior Application Security Engineer

5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment. Strong understanding of web app and API security, microservices, and containerized architectures. Experience integrating security tooling into modern CI/CD workflows. Proficiency with SAST, DAST, IaC scanning, and container security platforms. Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript). Familiarity with AWS security, Kubernetes security, and DevSecOps best practices.

Lead application security initiatives across all SaaS products and microservices. Conduct threat modeling, architecture reviews, and secure code assessments. Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools. Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities. Drive AppSec awareness and training, developing secure coding practices. Evaluate and deploy container security controls. Support bug bounty and vulnerability disclosure programs and coordinate penetration testing. Stay ahead of emerging application and container threats.