Security Engineer, Application Security

Responsibilities

• Support secure code reviews, architecture reviews, threat modeling, and the security review program.
• Manage vulnerability intake, triage, prioritization, remediation tracking, bug bounty, and responsible disclosure activities.
• Partner with engineering and product teams to embed secure-by-design practices and security tooling into developer and CI/CD workflows.
• Validate and reproduce application and infrastructure security findings through scanning, manual testing, and penetration-testing support.
• Evaluate and respond to emerging application security threats across Sentry’s applications, SDKs, cloud platform, and agentic product capabilities.
• Build scalable security automation and influence security practices across the engineering organization.

Requirements

• At least 2 years of industry experience designing, building, or securing complex applications and cloud systems.
• A degree in Computer Science or a related field, equivalent training, or professional experience.
• Hands-on experience with several of security reviews, SDLC practices, secure CI/CD, architecture reviews, threat modeling, vulnerability management, and bug bounty or responsible disclosure programs.
• Programming experience in at least one language and the ability to read and reason about Python, TypeScript, Go, or Rust code.
• Familiarity with AWS, GCP, Azure, Kubernetes, Docker, or Terraform and how cloud networking and IAM are secured.
• Strong written and verbal communication skills and a collaborative approach to problem solving.

Benefits

• Eligibility for Sentry employee benefit plans, including incentive compensation, equity grants, paid time off, and group health insurance coverage.