Staff Application Security Engineer

Responsibilities

• Develop, implement, maintain, and govern the application security program across research, development, QA, support, and IT systems.
• Advise on secure product and architecture design and conduct architecture security reviews, security-focused code reviews, and security testing.
• Partner with engineering and product teams on security systems, secure code, threat models, risk assessments, and security posture.
• Monitor software usage, conduct forensic analysis, and track emerging web and client application security standards and practices.
• Provide leadership and guidance to security, development, systems, support, and QA teams while mentoring junior security engineers.
• Evaluate and govern the secure use of AI-assisted development tools and leverage AI/ML tools for security testing, threat modeling, and code review.

Requirements

• 8+ years of relevant information security and/or software engineering experience.
• Fluency with AI/LLM security risks, including OWASP Top 10 for LLM Applications, prompt injection, model poisoning, and data exfiltration.
• Experience evaluating or securing AI-powered application features, AI coding assistants, or responsible AI/ML data handling and privacy practices.
• Strong knowledge of secure application programming, coding lifecycles, security architecture, software and network architecture, authentication, threat assessment, risk management, and security processes.
• Advanced knowledge of multiple operating systems and hosting environments, plus knowledge of reverse engineering techniques and tools.
• Ability to implement code from technical specifications, work with data storage formats and tools, and understand programming languages used in secured products.
• Ability to communicate security objectives and technical concepts to varied audiences and complete the technical challenge.
• Preferred: bachelor’s degree in Computer Science or Information Security.
• Preferred: one or more relevant certifications such as CISSP, CEH, PNPT, OSWE, GWAPT, OSED, or OSCP.

Benefits

• Health coverage, retirement savings with company match, paid time off, parental leave, wellbeing resources, education support, and additional benefits.
• Remote within the United States with up to 10% travel as needed.
• Eligible for a bonus target.