Senior Application Security Engineer
Core
Senior Application Security Engineer driving DevSecOps, vulnerability management, and AI-enhanced security controls across the software development lifecycle.
Role type
Senior IC application security engineer (DevSecOps & AI security)
Builds
Modern DevSecOps ecosystem, AI-driven vulnerability analysis, secure SDLC pipelines, and threat modeling for AI-enabled systems
Domain
Cybersecurity, Software Development, Cloud Security, AI Security
Required skills
DevSecOps, vulnerability management, AI security (prompt injection, model poisoning), CI/CD security, threat modeling, secure SDLC, cloud security (AWS/Azure), scripting (Python, Bash, etc.), SAST/DAST/SCA tools, supply chain security (SBOM)
Preferred skills
AI model security, container security (Kubernetes), secure coding training, security certifications (CSSLP, CISSP)
Technologies
GitHub, GitLab, Azure DevOps, Jenkins, Docker, Kubernetes, ECS/EKS/AKS, Python, PowerShell, Bash, C#, Java, JS/TS, Ruby, SAST/DAST/SCA tools
Responsibilities
Build modern DevSecOps ecosystems leveraging AI; integrate AI-driven analysis for vulnerability prioritization; lead threat modeling for AI-enabled systems; define metrics for AI application security posture; drive security controls in CI/CD pipelines; manage software supply chain security; support incident response for application security events
Seniority
Senior, hands-on IC
