Senior Security Engineer, Application Security
New
J
JobgetherApplication security
Fully remote work arrangement within the United States., Eastern or Central US time zones preferred.Full-TimeSenior
SalaryAnnual base salary range of $150,000–$225,000, depending on experience, performance, and geographic location. Eligibility for a competitive year-end performance bonus and equity package.
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of experience in security engineering
- Required Skills
- AWSOAuthTerraform
Requirements
- Have 5+ years of experience in security engineering, spanning at least two of application security, cloud or infrastructure security, and enterprise security.
- Have hands-on experience with AWS and infrastructure-as-code tools such as Terraform, CloudFormation, or equivalent technologies.
- Be able to read, review, and contribute to product or service code; Kotlin, Next.js, Python, Ruby, Scala, or Swift experience is preferred.
- Understand the OWASP Top 10 and practical approaches to identifying and remediating common application vulnerabilities.
- Be familiar with authentication and authorization standards including OAuth, OpenID Connect (OIDC), and SAML.
- Have exposure to security risks in LLM and agentic systems, including prompt injection, agent identity, and data exfiltration.
- Use AI-assisted coding and security tools in practice and be able to explain how you guide, validate, and verify AI-generated output.
- Have experience producing threat models and providing clear security feedback on design documents and merge requests.
- Have experience implementing technical controls for PCI, SOX, or similar compliance standards, including vulnerability scanning, control reviews, and tamper detection.
- Be familiar with application security tools such as Snyk, Veracode, or Fortify; infrastructure vulnerability scanners such as Qualys, Tenable, or Rapid7; and penetration testing tools such as Burp Suite or OWASP ZAP. These tools are preferred.
- Experience with containers and Kubernetes is an advantage.
- Be able to work independently and collaborate effectively with distributed teams.
Responsibilities
- Lead security initiatives from planning through implementation across cloud infrastructure hardening and application security.
- Own and maintain technical security controls for frameworks such as PCI DSS, including ASV scanning, network security control reviews, and tamper-detection monitoring.
- Deploy, configure, and optimize infrastructure protections against application exploitation, account takeover, and denial-of-service attacks.
- Define security architecture and conduct threat modeling for AI-powered products, including voice and chat agents.
- Review technical proposals, product requirements, and merge requests, partnering with product and engineering teams during feature design and development.
- Develop security tooling, automation, and engineering frameworks for development teams.
- Mentor engineers and identify opportunities to improve security practices, tooling, and processes.
- Participate in the incident response lifecycle, including a 24/7 on-call rotation.
- Evaluate and integrate AI-driven tools into security workflows, including AI-assisted coding and security solutions.
View Full Description & ApplyYou'll be redirected to the employer's site
