Sr Application Security Engineer

Role overview Own and advance application security across software development, quality assurance, support, and IT systems. This senior role combines security architecture and program guidance with hands-on reviews, testing, and secure implementation, partnering closely with engineering and product teams. The position is remote within the United States, with travel of up to 10% as needed.

Responsibilities - Advise on secure product design and architecture, and conduct architecture reviews, focused code reviews, and security testing. - Work with engineering and product teams to build security features and systems, contribute secure code when needed, and validate threat models and risk posture. - Monitor software use and investigate whether systems meet security standards. - Track developments in web and client application security and guide teams on emerging practices. - Present technical security concepts to senior leaders and participate in product delivery throughout the software development lifecycle. - Apply AI and machine learning tools to security testing, threat modeling, and code review workflows.

Requirements - At least five years of information security and/or software engineering experience. - Knowledge of secure application development, coding lifecycles, design, and the ability to implement from technical specifications. - Understanding of security principles, architectures, tools, operating systems, hosting environments, network and software architecture, and authentication methods. - Ability to assess threats and risks and develop practical, risk-based security processes across development approaches. - Strong communication skills, working knowledge of reverse engineering, and familiarity with data formats, storage tools, and programming languages. - Familiarity with AI and LLM security risks, such as prompt injection, model poisoning, and data exfiltration, and experience assessing AI-powered features, coding assistants, or responsible AI data practices.

Nice to have - Bachelor’s degree in computer science or information security. - Relevant certification such as CISSP, CEH, PNPT, OSWE, GWAPT, OSED, or OSCP.

Benefits and work setup Remote in the United States; up to 10% travel. Benefits listed include medical, dental, and vision coverage, retirement plan with company match, paid time off, parental leave, disability coverage, education benefits, and flexible spending or health savings accounts. Benefits may vary by location or employment status. Candidates must be authorized to work in the United States without current or future employer visa sponsorship.