Staff Application Security Engineer

Key Responsibilities:

• Lead threat modeling and security architecture reviews for distributed, event-driven systems.
• Integrate security code reviews, SAST/DAST, Software Composition Analysis (SCA), and container scanning into CI/CD and AI/ML pipelines.
• Coordinate and lead incident simulations specific to AI systems.

Embedding Security into the SDLC:

• Collaborate with engineers and product teams to build secure features without impeding innovation.
• Establish and lead security checkpoints across the software development lifecycle.
• Review system designs, architecture, and data flow diagrams to identify and mitigate risks early.

Security Awareness & Policy Implementation:

• Evangelize secure coding and AI security through training, brown bag sessions, and workshops.
• Develop and roll out internal security policies, standards, and best practices.
• Raise awareness of security threats through documentation and hands-on engagement.