Staff Engineer, Application Security
New
E
Everyday ElectricResidential energy
Workable locations: United StatesFull-TimeStaff
SalaryThe base salary for this role is $170k - $220k. In addition to base compensation, this role is eligible for a target annual bonus of 15% of base salary, and participation in long-term incentive programs tied to company growth and performance.
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of experience in application, product, cloud, or infrastructure security
Requirements
- Have 7+ years of experience in application, product, cloud, or infrastructure security.
- Bring strong hands-on security engineering experience.
- Have software engineering skills, including the ability to read, write, and review production code and design practical security improvements.
- Understand application and API security, authentication and authorization, cloud security, and modern software development and delivery.
- Have experience designing scalable security architecture and secure-by-default controls across applications and cloud infrastructure.
- Understand AI and agentic security risks, including prompt injection, insecure tool use, excessive permissions, sensitive-data leakage, and risks associated with MCP and third-party AI integrations.
- Be proficient with AWS security services such as IAM, WAF, GuardDuty, and AWS Inspector, and application security tools such as CodeQL, Burp Suite, Zap, and Nuclei.
- Have a strong understanding of networking, security, and core Internet protocols, including TCP/IP, DNS, SMTP, SSL, and distributed networks.
- Demonstrate the ability to lead complex security initiatives across multiple teams, influence technical direction, and work independently in ambiguous problem spaces.
- Be able to translate security risks into practical engineering decisions.
Responsibilities
- Define and drive security strategy across applications, cloud infrastructure, and AI systems.
- Identify high-impact security risks and lead cross-functional initiatives to address them.
- Lead security architecture reviews, threat modeling, code reviews, and security testing.
- Partner with engineering teams to build security into the SDLC and develop secure-by-default patterns and guardrails.
- Define and implement security guardrails for LLM-powered applications, AI agents, coding assistants, and MCP/tool integrations.
- Improve security across AWS/GCP, containers, CI/CD, identity and access management, and the software supply chain through scalable controls and automation.
- Improve the discovery, prioritization, remediation, and detection of security issues, and provide technical leadership during significant security incidents.
- Partner with Engineering, Infrastructure, IT, Legal, and other teams on security architecture, policies, compliance programs, and emerging risks.
- Build engineering security capabilities through tooling, training, security champions, technical guidance, and mentorship.
View Full Description & ApplyYou'll be redirected to the employer's site
