Senior Security Engineer II

Overview

Senior Application Security Engineer leading application security strategy and scalable security capabilities across web, API, mobile, cloud, and AI-powered applications.

What you'll do

• Define and drive application security strategy across web, API, mobile, and cloud-native applications.
• Lead security architecture reviews and establish secure-by-default practices across the SDLC.
• Mature and automate SAST, DAST, SCA, IaC scanning, secrets detection, and container security.
• Build security automation integrated into CI/CD pipelines and enable reusable security services.
• Lead security reviews for LLM integrations, AI agents, MCP-based architectures, and RAG systems.
• Conduct threat modeling and targeted penetration testing for high-risk applications.

What you'll need

• 8–12+ years of experience in application security, product security, or security engineering.
• Demonstrated experience securing large-scale cloud-native applications.
• Expertise with OWASP Top 10, API Security Top 10, Mobile Top 10, and common software attack techniques.
• Experience with SAST, DAST, SCA, container security, IaC security, and secrets management.
• Strong understanding of OAuth2, OIDC, JWT, and mTLS.
• Hands-on programming experience in Python, Java, JavaScript, Go, or C#.
• Experience performing threat modeling and architecture reviews.