Senior Application Security Engineer
About The Position
The Senior Application Security Engineer plans and carries out application security testing throughout all phases of the software development life cycle, identifies application vulnerabilities and weaknesses in secure coding practices, and recommends risk-mitigating solutions. The role uses automation to improve testing and remediation efficiency, communicates security findings and recommendations to stakeholders, and documents progress against service-level agreements and business metrics. The engineer leads AI security initiatives, including threat modeling production LLM stacks for autonomy and prompt-injection risks and auditing third-party models and APIs to secure the software supply chain. The role works with business units, product teams, architects, and developers to identify security needs early, drive secure design practices, and establish an automated, repeatable security review process. It also monitors the security community for emerging issues and testing techniques, and trains developers and junior application security engineers.
Requirements
- At least 4 years of related experience.
- Bachelor’s degree, ideally in Computer Science, Information Technology, Software Engineering, or a related technical field, or equivalent work experience.
- Technical and analytical capabilities, with a background in software development and scripting.
- Experience with one or more scripting or programming languages, such as Java, Python, C++, Ruby, JavaScript, PowerShell, or PHP.
- Expertise in application security testing, including hands-on experience with SAST, DAST, and SCA tools.
- Proficiency in application security assessments, including threat modeling, vulnerability and penetration testing, API security, OWASP Top Ten mitigation, and securing applications in AWS and private cloud environments.
- Experience with frameworks such as ISO 27001, NIST, GDPR, CIS, or SOC 2.
Nice To Haves
- Relevant certifications such as C|ASE, CSSLP, GWAPT, OSCP, or equivalent.
Responsibilities
- Plan and perform application security testing throughout the software development life cycle.
- Identify application vulnerabilities and weaknesses in secure coding practices.
- Assess vulnerabilities and recommend risk-mitigating solutions, using automation to improve testing and remediation.
- Communicate findings, risks, and recommendations to stakeholders and document delivery and implementation progress against SLAs and business metrics.
- Lead AI security initiatives, including threat modeling production LLM stacks for autonomy and prompt-injection risks and auditing third-party models and APIs.
- Participate in product and application projects and work with business units and technical teams to address security early in project development.
- Collaborate with architects and development teams to promote secure design practices using established security standards, configurations, and frameworks.
- Define and follow an automated, repeatable security review process.
- Monitor the security community for public-facing security issues and new testing tactics.
- Train developers and junior application security engineers on weaknesses to avoid.
- Perform other duties as assigned.
Benefits
- Company profit-sharing bonus program, communication stipends, and referral bonuses.
- Comprehensive medical and dental insurance and company-paid vision insurance.
- 401(k) retirement plan with employer match.
- Voluntary life and AD&D insurance options.
- Voluntary supplemental insurance for accident, critical illness, and legal services.
- Paid time off and paid holidays.
- Employee assistance and wellness programs.
- Company-paid short-term disability coverage.
- Company contributions to health savings funds for participants in the high-deductible health plan.
- Company-paid access to Galileo virtual primary care and Rula virtual mental health resources.
- Anniversary Program recognizing employee milestones and long tenure.
- Career and skill development resources.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
