Senior / Staff Application Security Engineer

Job summary

Responsibilities

We’re looking for a Senior / Staff Application Security Engineer to own the security of how our product is built. You’ll be the person who makes sure our code, APIs, and services are secure by design — threat-modeling the product, hardening the application layer, and building the AppSec practice…

• Execute application security end to end: threat-model features and services, and drive remediation of the most significant risks.
• Secure the application layer against the vulnerabilities that matter most — injection, broken authentication and authorization, and insecure APIs.
• Build and run a secure SDLC: code-review guardrails, SAST/DAST, dependency and supply-chain security, secrets management, and pre-production testing.
• Harden authentication, authorization, and session/identity handling across the product.
• Secure the AI-specific application surface — model and inference endpoints, prompt and input handling, and the new classes of vulnerability that come with shipping generative…

What they're looking for

• 6+ years in security engineering with deep, hands-on application-security expertise.
• Strong command of the vulnerability classes that cause incidents and how to eliminate them at the source — code, API, and authz design.
• A builder who has stood up AppSec practices and secure-SDLC tooling, not only operated established ones.
• Fluent in modern application stacks and comfortable in AWS.
• Able to work shoulder-to-shoulder with engineers and raise the bar without becoming a blocker.

Tech stack

• AWS