Staff Application Security Engineer

Overview

Staff Application Security Engineer responsible for setting technical direction across application security and vulnerability management programs covering cloud services, IoT firmware, and corporate systems.

What you'll do

• Lead and continuously improve vulnerability management and application security programs.
• Reduce vulnerability mean time to remediation across the backlog.
• Build automation and tooling for vulnerability detection and response.
• Set architectural direction and translate strategy into execution plans.
• Drive remediation through guidance and collaboration with engineering teams.
• Mentor engineers on secure design and remediation practices.
• Investigate critical vulnerability incidents and participate in on-call response.

What you'll need

• 10+ years of relevant cloud or security engineering experience.
• Hands-on vulnerability management across a broad, multi-product enterprise environment.
• Proficiency in Go, Python, and JavaScript.
• Experience setting technical direction and driving remediation without direct authority.
• Experience with vulnerability tools such as Wiz or Semgrep and scoring frameworks including CVSS and EPSS.
• Strong AWS background and understanding of SAST, DAST, and SCA.
• Hands-on use of AI/LLM tooling in security workflows.

Nice to have

• Experience with C/C++, firmware, or embedded systems.
• Experience with security automation platforms, serverless frameworks, and CI/CD integration.
• Experience across SaaS, firmware, and corporate IT security programs.
• Experience in a FedRAMP-certified environment.
• Experience building AI security copilots or agents.

Details

• Remote position open to candidates residing in the US.
• Full-time role.
• Annual base salary: USD 165,200–295,000.