Senior Security Engineer, Application Security
New
A
AngiCybersecurity
Remote - United States, eastern or central time zonesFull-TimeSenior
SalaryThe base salary band for this position ranges from $150,000 - $225,000. This position will be eligible for a competitive year end performance bonus & equity package.
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years in security engineering
- Required Skills
- AWSOAuth
Requirements
- Have 5+ years of security engineering experience spanning at least two of application security, cloud/infrastructure security, or enterprise security.
- Have hands-on experience with AWS and infrastructure-as-code such as Terraform, CloudFormation, or an equivalent.
- Be comfortable reading and contributing to product service code; Kotlin, NextJS, Python, Ruby, Scala, and Swift are preferred.
- Understand the OWASP Top 10 and how its risks are remediated.
- Know authentication and authorization standards including OAuth, OIDC, and SAML.
- Have some exposure to LLM or agentic system security, including prompt injection, agent identity, or data exfiltration via AI systems.
- Use AI-assisted coding and security tools daily and be able to explain how you direct and verify AI output.
- Write threat models and provide written feedback on design documents and merge requests.
- Be comfortable executing technical compliance work such as vulnerability scanning, control reviews, and tamper detection.
- Have hands-on experience with static analysis tools such as Snyk, Veracode, or Fortify; infrastructure vulnerability scanners such as Qualys, Tenable, or Rapid7; and penetration testing tools such as BurpSuite or OWASP ZAP.
- Container and Kubernetes experience is preferred.
Responsibilities
- Own end-to-end security initiatives across cloud infrastructure hardening and application security.
- Own technical controls retained by InfoSec within compliance frameworks such as PCI DSS.
- Deploy and tune infrastructure that protects applications from exploitation, account takeover, and denial of service.
- Drive security architecture and threat modeling for AI agent products with voice/chat, calendar, and account access.
- Review RFCs, PRDs, and merge requests from a security perspective and partner with product and engineering teams.
- Build tooling and frameworks that make secure development paths easier for engineers.
- Mentor engineers and address recurring incident patterns, tooling gaps, and process debt.
- Participate in the incident response lifecycle and a 24/7 on-call rotation.
- Evaluate and integrate AI-driven tooling into InfoSec workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
