Senior Application Security Engineer

GFiber

1d•$156,900 - $229,700

About The Position

At GFiber, we believe that great internet has the power to drive innovation, strengthen communities, enable the impossible, and do all the everyday things that make all of our world go round. And the job of creating better internet is never done - so we’re growing! Our team is committed to building a place where people who want to make a difference can grow their careers and find their spot to belong. GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States. Our teams are expanding as we connect more cities and people to exceptional internet. This role is not eligible for immigration sponsorship. As a Senior Application Security Engineer, you will be a core technical advisor for securing GFiber’s applications and development ecosystems. You will partner closely with engineering teams to review code, secure software delivery pipelines, and design frameworks that make writing secure code the path of least resistance. You will lead initiatives ranging from managing threat detection boundaries to establishing cutting-edge AI integrations within our development lifecycle. This is a highly collaborative role where you will influence engineering practices, champion security culture across teams, and occasionally share strategic insights with senior leadership.

Requirements

Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
5 years of experience with managing Web Application Firewalls (WAF) and integrating automated security gating into CI/CD pipelines.
Experience with vulnerability management and cloud-hosted application security scanning tools.
Experience collaborating directly with software development teams on threat mitigation.
Experience with scripting or programming languages (i.e., Python, Java, Kotlin) to automate security processes.

Nice To Haves

Experience implementing security guardrails, context controls, or monitoring for Large Language Models (LLMs) and AI-assisted development tools.
Experience leading or growing a security champions program or a bug bounty platform.
Experience mentoring junior security professionals or teaching secure coding practices to engineering teams.
Experience analyzing technical security risks and presenting metrics or findings to upper management.
Knowledge of ISP infrastructure, web-scale networks, or cloud environments (e.g., GCP, AWS).

Responsibilities

Manage and optimize core application defenses, including the Web Application Firewall (WAF) and automated vulnerability scanning tools, while monitoring key security metrics.
Architect and maintain security gating processes within the CI/CD pipeline to ensure secure, seamless software delivery.
Govern and secure our growing AI pipeline within the SDLC by implementing input/output monitoring, context controls, and safety guardrails around AI-generated code.
Partner with development teams to remediate vulnerabilities, scale the security champions program, and co-lead our public bug bounty initiative.
Mentor junior engineers and analysts, and occasionally present security postures, trends, and program milestones to upper management.