Senior Security Software Engineer, Application Security

Overview

Senior Security Software Engineer on the Application Security team, a hands-on role that designs, builds and ships security solutions integrated into developer workflows and platforms.

What you'll do

• Integrate security into CI/CD pipelines and drive secure-by-default engineering practices
• Design and build security controls, libraries, and guardrails directly in code
• Develop and scale automated security tooling across CI/CD (SAST, dependency scanning, secrets detection, fuzzing, etc.)
• Build and improve detection and prevention mechanisms for abuse, data exfiltration, and supply chain risks
• Automate vulnerability triage, prioritization, and remediation workflows at scale
• Integrate security into developer workflows and internal platforms to reduce friction and increase adoption
• Design and implement security controls for agentic and AI-assisted workflows, building guardrails to mitigate risks such as prompt injection, data exfiltration, and misuse of developer and system privileges
• Contribute to secure system design and architecture reviews, including threat modeling for new products and features
• Participate in AppSec on-call rotations and contribute to security tooling and platform evolution

What you'll need

• 6+ years of experience in software engineering, application security, or security engineering
• Strong coding skills in at least one language (e.g., Python, Go, C#, JavaScript, Rust, C++)
• Build and scale security automation in CI/CD pipelines (SAST, SCA, secrets detection, and fuzzing)
• Solid understanding of application security fundamentals (OWASP Top 10, auth models, common vulnerabilities and mitigations)
• Background with cloud environments and modern architectures (microservices, APIs)
• Working knowledge of Linux/Windows systems, networking fundamentals, and system-level security
• Experience designing and implementing secure, scalable systems, including APIs, microservices, and distributed architectures
• Ability to translate security risks into practical, scalable engineering solutions
• Bachelor's degree in a relevant field or equivalent practical experience

Nice to have

• Experience building security platforms, tools, or developer frameworks
• Knowledge of cryptography, PKI, TLS, and secure implementations
• Experience with container security and Kubernetes
• Experience building internal security platforms or developer tooling
• Background of supply chain security (SBOMs, signing, provenance, build integrity)

Details

• Based at headquarters in San Mateo, CA
• Onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday (unless otherwise noted)
• Annual base salary range $269,170 — $326,060 USD; eligible for equity compensation and benefits
• For US-based roles only, the Company may not be able to employ candidates who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time