Staff Application Security Engineer

Role overview

This Staff-level role drives the technical direction of application security and vulnerability management for a Connected Operations IoT platform that processes trillions of data points annually. You will shape programs spanning cloud services, internal systems, and firmware running on IoT hardware, balancing broad architectural influence with hands-on depth on critical priorities.

Responsibilities

- Own and continuously improve the vulnerability management program and other core application security programs, defining process rather than only executing against an existing one. - Drive down mean time to remediate (MTTR) across the vulnerability backlog as SLAs tighten. - Build and champion automation and tooling to scale detection and response across cloud, firmware/IoT, and corporate systems. - Set technical and architectural direction, translating leadership priorities into a concrete execution plan for the team. - Partner with engineering teams to drive remediation, providing clear, actionable guidance and building trust. - Mentor engineers on secure design and remediation practices and serve as a go-to technical voice when priorities are unclear. - Communicate risk and remediation tradeoffs to engineering leadership in actionable terms. - Participate in incident investigations involving high-profile vulnerabilities and assess potential impact. - Be available on call to support critical vulnerability response.

Requirements

- Senior-level experience in application security and vulnerability management. - Hands-on engineering background with strong skills in automation, tooling, and code review. - Experience securing cloud services, IoT/firmware, and corporate systems at scale. - Track record of setting technical direction and influencing engineering organizations. - Strong communication skills for partnering with engineering leaders and cross-functional teams. - US residency with eligibility to work remotely.

Benefits and work setup

- Remote position within the US with flexibility for onsite collaboration. - Comprehensive health coverage, parental leave, and professional development stipend. - Inclusive hiring with reasonable accommodations available throughout the recruiting process.