Sr. Software Engineer - Application Security

Role Description

We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.

This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include:

• Development in common web languages
• Application security and AI tool usage

Leverage AI tools and software for:

• Building new and maintaining existing software security features
• Meeting evolving software security needs in existing software
• Developing new components as needed
• Performing security assessments and code reviews on internal and external customer-facing applications
• Working closely with engineers to remediate security vulnerabilities using AI tools
• Developing security automation and tooling to improve security
• Supporting bug bounty program and vulnerability handling
• Investigating newly reported vulnerabilities
• Determining ways to remediate them
• Providing guidance to engineering based on known vulnerabilities found in existing applications
• Understanding cryptography and secure authentication
• Knowledge of cloud environments and security they provide

Support and develop on large software stack using:

• Apache Tomcat running across a large number of servers
• JavaServer Pages (JSP) containing older features
• Node/JavaScript developed features and pages
• An architecture split among many different servers – supporting browsers and custom client software
• Strong security knowledge across large software stacks running on multiple servers
• Ability to reach out and learn about technologies or implementations as necessary

Qualifications

• Application Development and Security knowledge
• AI knowledge and experience using it for development & security
• Understanding of AI Frameworks and tooling, core web security, common web security flaws, coding agents
• Strong understanding of OWASP Top 10 vulnerabilities
• Experience with security testing tools such as SAST / DAST scanners, fuzzing tools, vulnerability scanners
• Familiar with web technologies: REST APIs, etc.
• Experience with Web Applications, Cloud Systems and Linux Environments
• Determining how new and old security needs can leverage AI workflows and integrations to improve them
• AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others
• Experience with programming languages such as Java, JSP, JavaScript, TypeScript, Go, Python and C/C++

Benefits

• Build secure software used by companies worldwide
• Work at the intersection of AI, data, and cloud storage
• Collaborate with experienced engineering, security, product, and QA teams
• Competitive compensation and benefits
• Remote-first culture supporting work-life balance