Senior Application Cybersecurity Engineer

Gallup • San Francisco, CA

84d • $150,000 - $200,000

About The Position

Gallup is seeking a senior application cybersecurity engineer who thrives at the intersection of engineering and security. You’ll partner with development teams to build secure by design applications, lead threat modeling efforts and strengthen our AWS cloud environments. This role offers the autonomy to innovate, the responsibility to safeguard critical systems and the opportunity to leave a lasting impact on how security scales across Gallup.

Requirements

• Bachelor’s degree in cybersecurity, information assurance, computer science or a related field required
• At least five years of experience in enterprise application security engineering required
• Hands-on experience with threat modeling, secure web/API design required
• Demonstrated expertise in mobile, web, and API penetration testing required
• Proficiency with SAST, SCA, code reviews and DevSecOps pipelines required
• Strong programming or scripting skills in at least one language (e.g., Python, JavaScript, C#, Java) required
• A commitment to working on-site at Gallup’s San Francisco office at least three days a week required

Nice To Haves

• Familiarity with AWS security best practices and Splunk preferred
• Certifications such as OSWE, OSCP, GWAPT and GXPN preferred

Responsibilities

• Review and advise on secure design for web applications, APIs, CI/CD pipelines and AWS services
• Lead and facilitate threat modeling (e.g., STRIDE, attack trees) to proactively identify risks
• Partner with development teams to embed secure coding, conduct reviews and integrate security controls into pipelines
• Perform and interpret application security testing, such as SAST, SCA, DAST, mobile, web and API penetration
• Manage cloud security posture (CSPM) across AWS environments
• Build and monitor AppSec-specific logs, alerts and dashboards
• Develop tools, processes and playbooks that make secure by design scalable
• Respond to urgent security incidents and coordinate with legal, security and engineering teams
• Share knowledge and foster security awareness across engineering teams

Benefits

• Medical, dental, vision, life and other insurance options
• Fully vested 401(k) retirement savings plan with company matching
• Employee stock ownership program
• Mass transit reimbursement
• Family-building benefits
• Employee assistance program
• Various reimbursements and activities that enhance our associates’ wellbeing
• Estimated annual salary range of $150,000-$200,000

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees