Senior Application Security Engineer

📋 Description

• Define and implement secure software development practices, incl. secure coding standards and code
• Lead Shift Left security initiatives with engineering teams early in SDLC.
• Identify, assess, and remediate application vulnerabilities with automated/manual tests.
• Serve as application security SME to help developers mitigate risks.
• Manage tools supporting the application security program, incl. OSS tools.
• Develop and lead threat modeling, risk assessments, security audits, and reviews.

🎯 Requirements

• Bachelor’s degree in CS/Software Eng/Cybersecurity, or equivalent experience.
• At least 5 years in software/dev role with strong app security.
• Strong knowledge of secure SDLC, vulnerability management, threat modeling.
• Experience integrating security controls into CI/CD workflows.
• Familiarity with AI/LLM security concepts (prompt injection, RAG, agentic workflows).
• Experience with OWASP, MITRE ATLAS, and NIST AI RMF.

🎁 Benefits

• Medical, dental, and vision insurance.
• Life insurance and AD&D coverage.
• Long-term disability insurance.
• 401(k) with employer match.
• Remote work environment with Mon–Fri schedule.
• Opportunity to influence enterprise app security practices.