Staff Application Security Engineer

Role overview This role owns the security posture of a large-scale travel technology platform, leading the application security programme, vulnerability management pipeline, and SIEM operations. The engineer partners closely with product engineering, performs architecture and code reviews, runs light penetration testing, and drives incident response. The position combines hands-on technical work with cross-team mentorship in a fast-paced, collaborative environment.

Responsibilities - Configure, tune, and operate the SIEM platform, developing alerts and analysing threats across multiple layers. - Conduct architecture reviews, code reviews, infrastructure configuration reviews, and light penetration tests on web and mobile applications. - Build and maintain a vulnerability management CI/CD pipeline within the container and application delivery environment. - Partner with development and infrastructure teams to embed secure coding practices and clear, actionable security guidance. - Contribute to incident response and forensic investigations, weighing context and data during high-pressure decisions. - Stay current on emerging threats, support security training, and mentor engineering peers to strengthen the overall security posture.

Requirements - High proficiency in one or more programming languages such as Ruby, Java, Python, C#, or Node.js. - Expertise managing SIEM solutions with a focus on efficient, low-noise alerting. - Strong knowledge of Docker and Kubernetes, including hands-on automated container vulnerability management. - Mastery of SAST, DAST, and IAST tooling with the ability to manually validate findings. - Deep familiarity with OWASP Top 10, Mitre Top 25, secure coding practices, and frameworks such as SOC 2 and PCI. - Clear, direct communication skills with a track record of mentoring and earning trust with colleagues.

Nice to have - Experience driving application security programmes end-to-end in cloud-native, containerised environments.

Benefits and work setup - Hybrid-hub model with options to work from one of the company's offices or fully remote, with base pay in the $182,800–$215,000 USD range, equity, and potential annual bonus depending on role and location.