Senior Application Security Engineer

📋 Description

• Build and scale secure software development lifecycle practices, including secure coding standards
• Develop vulnerability prioritization capabilities across code, pipelines, and deployed services
• Establish scalable threat modeling practices for applications, APIs, delivery pipelines, RAG
• Architect security controls for CI/CD platforms such as GitHub Actions, Jenkins, GitLab, and Azure
• Design and optimize automated SAST, DAST, SCA, and container scanning workflows, improving
• Automate API discovery, dependency scanning, software bill of materials (SBOM) generation, secrets

🎯 Requirements

• At least 6 years of experience in Application Security, Product Security, or Secure Software
• Experience designing security controls for CI/CD pipelines and source code repositories, including
• Hands-on experience implementing and tuning SAST, DAST, SCA, and container scanning solutions to
• Experience implementing WAF and API protection capabilities and driving vulnerability remediation
• Knowledge of SLSA and NIST SSDF principles, including build integrity, secrets management, and
• Experience designing security controls in AWS, Azure, or GCP environments.

🎁 Benefits

• Remote work: The position is designated as Remote/Teleworker, with work primarily performed from
• Health and wellbeing: Access to a comprehensive benefits offering intended to support employees’
• Professional development: Career development programs designed to support progression
• Inclusive workplace: A culture that values diverse backgrounds, individual contributions, and