Staff Application Security Engineer

NBCUniversal•New York, NY

4h•$120,000 - $145,000•Remote

About The Position

NBCUniversal is seeking a Staff Cyber Systems Engineer to build and scale modern application security capabilities across the enterprise. This hands-on role within Software Security Services combines deep AppSec expertise, software engineering skills, cross-team thought leadership, and experience building automation, integrations, platforms, and developer-facing security capabilities. The role turns application security strategy into working solutions, including golden paths, remediation automation, secure AI guardrails, and integrated developer workflows. Although primarily focused on Application Security engineering, this role works closely with Cloud Security, Platform Engineering, and Software Engineering teams at NBCUniversal.

Requirements

8+ years of experience in Application Security, Security Engineering, DevSecOps, Software Engineering, or a related technical field.
Deep experience with secure software development, application security, vulnerability management, and software supply chain security.
Hands-on experience building security automations, integrations, APIs, platforms, developer tooling, or similar engineering solutions.
Strong software engineering and scripting skills using Python or similar languages.
Hands-on experience integrating AppSec technologies such as SAST, SCA, secrets detection, container security, CI/CD security, and vulnerability management into developer workflows.
Ability to solve complex, ambiguous technical problems and influence adoption through implementation, documentation, and collaboration.
Familiarity with AI-assisted development, agentic workflows, and related security considerations.

Nice To Haves

Experience with Snyk, Wiz Code, Github Advanced Security, Checkmarx, Veracode, or similar application security platforms.
Experience building secure developer platforms, internal tools, paved roads, golden paths, or reusable engineering services.
Experience across AppSec and CloudSec domains, including cloud-native architectures, containers, Kubernetes, infrastructure as code, CI/CD security, CSPM, CNAPP, or related technologies.
Experience with software supply chain security, SBOM capabilities, dependency risk workflows, or artifact security processes.
Experience using AI to improve vulnerability management, remediation workflows, security operations, or developer productivity.

Responsibilities

Design, build, and improve application security capabilities that support secure software development across NBCUniversal.
Build reusable security automations, integrations, APIs, workflows, and developer tools that reduce manual effort and improve scalability.
Implement secure-by-default golden paths, paved roads, and engineering patterns that make secure development easier to adopt.
Design and implement scalable security solutions spanning source code, open source dependencies, containers, cloud-native applications, CI/CD pipelines, infrastructure as code, developer platforms, and software supply chains.
Partner with Cloud Security on capabilities spanning application code, containers, CI/CD, infrastructure as code, cloud platforms, and software supply chain workflows.
Improve vulnerability prioritization, triage, remediation, validation, reporting, and speed to remediation.
Build security patterns, guardrails, and reusable implementations that support safe use of AI-assisted development tools and coding assistants.
Build capabilities that secure agentic workflows, AI-enabled developer tooling, and machine-assisted software delivery.
Use automation and AI-enabled techniques to improve vulnerability triage, remediation planning, developer guidance, and workflow efficiency.
Build integrations between application security platforms, GitHub, CI/CD systems, developer portals, ticketing systems, reporting platforms, and other engineering tools.
Create telemetry, dashboards, and reporting pipelines for actionable visibility into application risk, coverage, and remediation progress.
Serve as a senior technical expert for application security engineering, secure software development, software supply chain security, and secure AI development.
Partner with architects, platform engineers, cloud security engineers, and development teams to turn security direction into working technical solutions.
Mentor engineers and improve the team’s engineering practices, automation skills, and technical depth.