Senior Application Security Engineer

Role Description

As a Senior Application Security Engineer, you will be a core technical advisor for securing GFiber’s applications and development ecosystems. You will partner closely with engineering teams to:

• Review code, secure software delivery pipelines, and design frameworks that make writing secure code the path of least resistance.
• Lead initiatives ranging from managing threat detection boundaries to establishing cutting-edge AI integrations within our development lifecycle.
• Influence engineering practices and champion security culture across teams.
• Occasionally share strategic insights with senior leadership.

In this role, you’ll:

• Manage and optimize core application defenses, including the Web Application Firewall (WAF) and automated vulnerability scanning tools, while monitoring key security metrics.
• Architect and maintain security gating processes within the CI/CD pipeline to ensure secure, seamless software delivery.
• Govern and secure our growing AI pipeline within the SDLC by implementing input/output monitoring, context controls, and safety guardrails around AI-generated code.
• Partner with development teams to remediate vulnerabilities, scale the security champions program, and co-lead our public bug bounty initiative.
• Mentor junior engineers and analysts, and occasionally present security postures, trends, and program milestones to upper management.

Qualifications

• Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
• 5 years of experience with managing Web Application Firewalls (WAF) and integrating automated security gating into CI/CD pipelines.
• Experience with vulnerability management and cloud-hosted application security scanning tools.
• Experience collaborating directly with software development teams on threat mitigation.
• Experience with scripting or programming languages (i.e., Python, Java, Kotlin) to automate security processes.

Requirements

• Experience implementing security guardrails, context controls, or monitoring for Large Language Models (LLMs) and AI-assisted development tools.
• Experience leading or growing a security champions program or a bug bounty platform.
• Experience mentoring junior security professionals or teaching secure coding practices to engineering teams.
• Experience analyzing technical security risks and presenting metrics or findings to upper management.
• Knowledge of ISP infrastructure, web-scale networks, or cloud environments (e.g., GCP, AWS).

Benefits

• The US base salary range for this full-time position is between $156,900 - $229,700 + bonus + benefits.
• As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.