Lead Application Security Engineer

Responsibilities

• Help build and develop the company’s Application Security function.
• Conduct code reviews, service architecture reviews, secure code reviews, threat modeling, and architectural design reviews.
• Lead engineers in threat modeling applications and services.
• Define practical software security metrics with the Head of Information Security.
• Integrate, maintain, and automate security scanning tools into CI/CD pipelines.
• Build and integrate agentic security tools for company needs.
• Conduct targeted penetration testing on web and mobile applications.
• Assist with incident response, escalation support, vulnerability disclosure and bug bounty programs, and regulatory compliance implementation.
• Assist with interviewing and onboarding Security personnel.

Requirements

• At least 6 years of experience with Application Security processes.
• At least 2 years of experience as a Team Lead or Manager of an Application Security team.
• Broad and deep Application Security foundational knowledge.
• Professional experience using AI systems and agents for security outcomes.
• Deep understanding of the OWASP Top 10, CWE Top 25, and secure design patterns.
• Hands-on experience with security tools such as Snyk, GitHub Advanced Security, Burp Suite, and Fortify.
• Bachelor’s degree in Computer Science or Cybersecurity, or equivalent practical experience.
• Desired qualifications include software development experience related to mechanical engineering environments and familiarity with AWS, Azure, GCP, Docker, Kubernetes, and Infrastructure as Code.
• Ability to travel to conferences, vendors, and test sites as needed and intermittently work longer hours or weekends for critical needs.

Benefits

• Cash compensation of $200,000-$260,000, plus equity.
• Flexible paid time off and flexible working hours.
• Company-paid gold-level PPO health insurance for full-time employees, partners, and dependents.
• Company-paid dental and vision insurance for full-time employees, partners, and dependents.
• Disability insurance.
• Access to 401(k), health FSA, and dependent care FSA accounts.
• Relocation assistance for moving to Portland, Oregon.
• Full-time, on-site position in Portland, Oregon.