Application Security Engineer

Quick Facts

• Focus: application security tooling, automation, and secure-by-default development across the SDLC

Description

As part of the Product Security Engineering team, you’ll reduce risk at scale by building security infrastructure, automation, and tooling that helps engineers ship secure products with confidence. You’ll implement security tooling, write custom security rules, and build frameworks that address broad classes of vulnerabilities across web, mobile, and desktop environments.

Role Responsibilities

• Build and maintain security tools, automation, and libraries to enable secure-by-default development

• Design and implement custom security rules (e.g., Semgrep, CodeQL)

• Act as a subject matter expert on application security across web, mobile, and desktop

• Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows

• Perform targeted code reviews and develop follow-up tooling or controls to prevent regressions

• Collaborate with engineering, product, GRC, and AI/ML teams to proactively address security risks

Requirements

• 4+ years of experience in application security or security engineering roles

• Hands-on experience building or using security automation tools to improve developer workflows and product security

• Demonstrated ability to work across the SDLC, including supporting and interpreting findings from penetration tests and bug bounty reports

• Familiarity with modern tech stacks, including microservices, CI/CD pipelines, and cloud-native environments

• Solid understanding of common vulnerability classes (e.g., injection, XSS, authN/authZ) and practical mitigation strategies

• Comfortable working in cross-functional environments and supporting multiple product and engineering teams simultaneously

• Experience participating in or supporting incident response or security on-call rotations is a plus

Benefits

• Salary range: $193,500–$261,900 USD (US Zone 2) or $172,000–$232,800 USD (US Zone 3)

• On-call rotations may be required for teams that have them (all engineers on those teams are expected to participate)