Senior Application Engineer
New
Q
Quanata, LLCApplication security
You may work from anywhere you like in the U.S, excluding U.S. territories., Core meeting hours from 9AM - 2PM Pacific timeFull-TimeSenior
Salary232,000 - 379,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 6–8 years of experience in application security or full-stack development with security expertise.
- Required Skills
- Node.jsPythonJavascriptTypeScript
Requirements
- Have a Bachelor’s degree or equivalent relevant experience.
- Bring 6–8 years of experience in application security or full-stack development with security expertise.
- Understand secure coding practices in Python, JavaScript/TypeScript, Node.js, and web standards.
- Be familiar with the OWASP Top 10, including web and GenAI LLM risks, API security, SSRF, and related security concerns.
- Have experience with code scanning tools such as CodeQL, Wiz, SonarQube, or Snyk.
- Be comfortable reading and debugging complex codebases across the technology stack.
- Communicate clearly and guide engineers at all levels.
- Bonus: Have experience with GraphQL security, security champions programs, secure SDLC rollouts, open-source security tooling, infrastructure-as-code, container security, or AI/ML automation and development.
Responsibilities
- Partner with a product portfolio to manage product security, emphasizing AI/ML automation, security consulting, and cross-functional collaboration.
- Lead security design reviews and threat modeling for APIs, web features, and service integrations.
- Integrate SAST, SCA, and DAST tooling into CI/CD pipelines and developer workflows.
- Review source code and deployment configurations to identify security vulnerabilities.
- Partner with developers to triage, remediate, and validate security findings.
- Support secure development practices, maintain AppSec guidance, and contribute to security awareness and enablement.
- Develop and deploy AppSec automation and integrations, including ASVS scanning and Burp Suite Enterprise.
- Support application security integration reviews, SaaS security assessments, and open-source software reviews.
- Participate in cross-functional incident response and remediation planning.
View Full Description & ApplyYou'll be redirected to the employer's site
