Senior Application Security Engineer

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. This is an opportunity to shape application security across a large-scale enterprise technology environment, helping engineering teams build and deploy secure software from the first commit through production.

What you'll do

• Build and scale secure software development lifecycle practices, including secure coding standards, reference architectures, and developer-friendly security guardrails
• Develop vulnerability prioritization capabilities across code, pipelines, and deployed services, driving remediation through measurable outcomes
• Establish scalable threat modeling practices for applications, APIs, delivery pipelines, RAG architectures, and autonomous AI agents
• Architect security controls for CI/CD platforms such as GitHub Actions, Jenkins, GitLab, and Azure DevOps, ensuring security is integrated into pipelines by default
• Design and optimize automated SAST, DAST, SCA, and container scanning workflows, improving detection quality and reducing false positives

What you need

• 6–11 years in cybersecurity
• OWASP
• Python
• CI/CD
• LLMs
• Git
• Jenkins
• Any graduate

Good to have

• EDR
• Terraform
• Azure
• AWS
• GCP
• Node.js