Senior Cloud & Application Security Engineer

AXON-Networks•Irvine, CA

2d•$150,000 - $220,000

About The Position

The Senior Cloud & Application Security Engineer is the primary hands-on technical security engineer within AXON Networks' Information Security organization. The role partners with Software Engineering, Cloud Operations, Platform Engineering, DevOps, QA, and Product teams to identify security weaknesses, design practical controls, validate remediation, improve development security practices, and strengthen AXON's cloud-native platforms. The engineer works across source code, CI/CD pipelines, Kubernetes clusters, cloud infrastructure, APIs, identity systems, vulnerability findings, architecture diagrams, and production environments. The role provides security expertise, technical assurance, tooling, standards, testing, and guidance to help engineering teams build and operate secure systems; it does not replace Engineering ownership of secure software and infrastructure. The position is primarily intended for local candidates, although remote US-based candidates will be considered. AXON Networks is unable to offer visa sponsorship for this role.

Requirements

At least 5 years of experience in application security, cloud security, security engineering, DevSecOps, penetration testing, platform engineering, or related technical roles.
Strong knowledge of cloud-native application architectures.
Strong practical knowledge of Kubernetes and containers.
Understanding of CI/CD pipelines and modern software development workflows.
Experience with application security testing tools, including SAST, SCA, container scanning, dependency scanning, and secret detection.
Strong understanding of common application vulnerabilities and secure coding practices.
Experience evaluating REST APIs, service-to-service communications, authentication, authorization, and secrets handling.
Experience with at least one major public cloud platform.
Ability to analyze vulnerabilities and determine realistic exploitability and impact.
Ability to communicate effectively with developers and infrastructure engineers.

Nice To Haves

Experience with Go, Java, Python, C/C++, or other languages used in cloud-native environments.
Experience with GitLab Ultimate security functionality.
Experience with Terraform, Helm, Kubernetes operators, or infrastructure-as-code.
Experience with Azure, GCP, or OCI.
Familiarity with service meshes, gRPC, message buses, distributed systems, and microservice architectures.
Familiarity with OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV, and related vulnerability frameworks.
Experience with security testing tools such as Burp Suite, Nmap, Semgrep, Trivy, or equivalent tools.
Relevant certifications such as OSCP, CSSLP, CCSP, GIAC, Kubernetes security certifications, or equivalent practical experience.

Responsibilities

Partner with development teams to improve secure coding and application security practices.
Review security findings from SAST, SCA, dependency scanning, container scanning, secret detection, and other security tools.
Help teams assess exploitability, exposure, severity, and appropriate remediation of security findings.
Perform targeted manual security reviews of applications, APIs, and services.
Participate in application and architecture threat modeling.
Help define secure API design and input validation requirements.
Review authentication, authorization, session management, cryptography, secrets handling, and other security-sensitive functionality.
Support penetration testing and validate remediation of penetration-test findings.
Integrate and improve security controls within CI/CD pipelines, including security gates and automated testing.
Improve source code, dependency, container, and artifact security, and assist with artifact integrity, signing, provenance, and software supply-chain controls.
Evaluate build and deployment workflows for security weaknesses and help establish controls without unnecessary development friction.
Assess Kubernetes clusters, workloads, cloud environments, and supporting infrastructure for security weaknesses.
Review identity and access management, network security, segmentation, ingress and egress controls, workload identities, and service-to-service access.
Review container security, runtime configuration, secrets management, and image security.
Support implementation and validation of cloud security baselines and review infrastructure-as-code for security issues.
Partner with Cloud Operations and Platform Engineering on secure architecture.
Analyze vulnerabilities affecting AXON software, infrastructure, containers, dependencies, and services; evaluate newly disclosed CVEs for applicability and exposure.
Assist the Information Security Analyst and Engineering teams with vulnerability triage, validate remediation where appropriate, and distinguish theoretical scanner findings from meaningful exploitable risks.
Document technical findings and remediation recommendations.
Participate in design and architecture reviews, identify risks early, recommend practical controls and architectural improvements, and review new technologies, platforms, integrations, and services for security implications.
Help maintain approved security patterns and reference architectures.
Conduct targeted security testing of applications, APIs, cloud services, infrastructure, and configurations; develop repeatable validation procedures and automation where appropriate.
Coordinate with external penetration-testing providers, reproduce security findings, verify fixes, and assist teams in developing security-focused test cases.
Assist with technical investigation of suspected security incidents by reviewing logs, cloud events, authentication activity, network activity, and system evidence.
Help improve security telemetry and detection capabilities, and participate in incident-response exercises and post-incident reviews.
Provide technical guidance and mentorship to Security Champions, develop security training for Engineering and Operations teams, participate in Security Champion Council meetings, help Champions evaluate findings, and promote reusable secure engineering patterns.