Staff, Application Security Engineer

Overview

Staff Application Security Engineer on Walmart's Product Security team, which builds platforms that automate and scale security assessments, policy compliance and risk assessment inside software development and deployment processes.

What you'll do

• Own the day-to-day support, administration, configuration, integration, and operational health of ASPM (Application Security Posture Management), SSPM (SaaS Security Posture Management), and related security platforms.
• Align Product Security tooling with existing AppSec capabilities, standards, workflows, and roadmaps, minimizing unnecessary overlap and identifying opportunities for consolidation or integration.
• Evaluate industry-standard and emerging security technologies to determine whether current solutions adequately address identified security gaps and whether alternative or complementary capabilities are needed.
• Define technical requirements, use cases, success criteria, and evaluation methods for security tooling; lead proofs of concept and document recommendations based on security value, scalability, integration fit, operational effort, and total cost considerations.
• Integrate ASPM and SSPM platforms with source code management, ticketing, vulnerability management, identity, cloud, and other security systems to improve context, automation, and remediation workflows.
• Tune platform policies, rules, risk models, and integrations to improve signal accuracy, reduce false positives, prioritize exploitable or business-relevant risk, and drive actionable outcomes.
• Partner with developers, engineering teams, product teams, and business partners to understand their experience with security tooling and processes, gather actionable feedback, and translate those insights into improvements that reduce friction, streamline workflows, and improve security outcomes.
• Develop and maintain platform governance, operational procedures, configuration standards, support documentation, and control evidence to support consistent operations and audit readiness.
• Develop metrics to measure platform adoption, coverage, finding quality, remediation timelines, risk reduction, integration health, and overall tooling effectiveness.
• Share knowledge with Product Security, Application Security, developers, engineering teams, and business partners to promote consistent use of security tooling, secure development practices, and continuous improvement.
• Continually exercise effective communication, writing, and presentation skills.

What you'll need

• 10-15 years of overall experience.
• Bachelor's or master's degree in computer science, Software Engineering, Information Technology, or a related technical discipline.
• Hands-on experience supporting, administering, integrating, and operating ASPM, SSPM, or related application, SaaS, and cloud security platforms, including managing vendor technical engagements, escalations, roadmap discussions, and feature validation.
• Experience taking technical ownership of security platforms, including configuration, integrations, access, upgrades, troubleshooting, vendor engagement, operational health, and roadmap planning.
• Strong working knowledge of OWASP Top 10 risks, secure coding practices, software supply chain risk, SaaS security concepts, and basic threat modeling techniques.
• Understanding of how SAST (Static Application Security Testing), SCA (Software Composition Analysis), DAST (Dynamic Application Security Testing), secrets scanning, API security, cloud security, identity, and other security signals can be aggregated, correlated, prioritized, and operationalized through posture management platforms.
• Experience evaluating security technologies against defined use cases, security gaps, technical requirements, integration needs, and measurable outcomes.
• Ability to clearly communicate risk and technical tradeoffs, partner across security, development, engineering, product, and business teams, and drive practical solutions without creating unnecessary duplication or friction.
• Enjoys solving technical challenges, improving security tooling and processes, and supporting priority business initiatives.

Nice to have

• Certification in Security+, GISF, CISSP, CSSP, CASE, or GWEB.
• Master's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2 years' experience leading information security or cybersecurity projects.

Details

• Location: Bangalore office for daily work (Building 10 (SEZ), Cessna Business Park, Kadubeesanahalli Village, Varthur Hobli, India), with flexibility for associates to manage personal lives.