Senior Application Security Engineer

Your Role Responsibilities:

• Partner with engineering, product, and DevOps teams to integrate security practices throughout the software development lifecycle.
• Design, implement, and maintain security tooling within CI/CD pipelines covering SAST, DAST, SCA, secrets detection, and container scanning.
• Lead threat modeling, conduct application security assessments including code review and manual penetration testing.

Role Essentials:

• 5+ years of experience in application security, software security engineering, or a closely related role.
• Hands-on experience securing cloud-native environments on AWS, GCP, or Azure, including containers, Kubernetes, IAM, and serverless architectures.
• Strong command of application security fundamentals: OWASP Top 10, secure design principles, and common vulnerability classes.

Preferred Skills:

• Experience with infrastructure-as-code security (Terraform, CloudFormation, Helm) and policy-as-code frameworks such as OPA.
• Familiarity with AI/LLM security risks including prompt injection, model abuse, and insecure integrations.
• One or more relevant certifications: OSCP, CISSP, CEH, GWEB, CCSP, or equivalent.