Application Security Engineer

Omnissa•Atlanta, GA

23h•$111,637 - $186,062•Hybrid

About The Position

We are Omnissa! Omnissa is the first AI-driven digital work platform, built to support flexible, secure, work-from anywhere experiences. We integrate industry-leading solutions—including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance—into a seamless, autonomous workspace that adapts to how people work. Our platform boosts employee engagement while optimizing IT operations, security, and cost. Guided by our Core Values—Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value—we’re growing rapidly and committed to delivering meaningful impact. If you're passionate about shaping the future of work, we’d love to hear from you. At Omnissa, we are committed to maintaining a fair, consistent, and secure hiring process for all candidates. As part of this approach, we use standard interview and verification practices designed to ensure alignment and protect both candidates and the organization. These practices are applied thoughtfully and with respect for candidate privacy. This is a hands-on application security role for an engineer who can own well-scoped work and deliver it independently. You’ll contribute across multiple areas of the security program — from secure code reviews and application security testing to triaging vulnerabilities and building automation — collaborating with senior and staff engineers on the harder, more ambiguous problems. Omnissa’s portfolio spans six major product families and roughly a hundred products, so you’ll focus on assigned areas while steadily broadening your expertise and growing your scope and impact over time. This role is about the security of the code we write — reading it, reviewing it, and helping engineers find, fix, and prevent vulnerabilities in our own software — not CVE tracking, dependency patching, or third-party vulnerability management. It is deep, manual work: reasoning about source code to find issues that automated scanners miss, not operating SAST/DAST tools and forwarding their output. If you have an analytical mind, a passion for software security, and thrive on solving problems, this role is for you. A successful candidate is dependable, communicates clearly, manages their time well, and can identify and understand root causes.

Requirements

4+ years of experience in application security, or in software engineering with a demonstrated focus on security.
Solid working knowledge of common application security vulnerabilities and mitigation techniques.
Hands-on experience with manual secure code review and application security testing — reading source code to find vulnerabilities, not just running and triaging scanner output. Candidates whose experience is primarily operating SAST/DAST scanners are not a fit.
Proficiency in a programming language such as Java or C++, with the ability to read and reason about production code.
Ability to own well-scoped security work independently and deliver it reliably.
Strong problem-solving skills and attention to detail.
Good documentation and communication skills, and the ability to collaborate within a team.

Nice To Haves

Exposure to security across multiple domains — application, system, cloud, or mobile.
Experience writing automation or scripts to improve a technical process.
Familiarity with AI tooling and interest in testing agentic AI systems.
Prior experience in the software industry or multi-tenant SaaS.

Responsibilities

Lead threat modeling for the features and components in your area, and partner with senior engineers on threat models spanning complex or cross-cutting architectures.
Independently perform secure code reviews, manual application security testing, and penetration testing across assigned components, partnering with senior engineers on complex or distributed architectures.
Triage and validate reported vulnerabilities in our products, assess severity and impact, and drive fixes to closure with engineering teams.
Build and maintain automation and tooling that improve the security process.
Identify recurring issues in your areas and recommend improvements to tooling or process.
Document findings and guidance clearly, and collaborate with developers to strengthen secure development practices across the portfolio.