Application Security Engineer

You will champion application security throughout the development lifecycle. You will conduct secure code reviews, threat modeling, and architecture assessments; design and implement secure features with engineers; integrate automated security tools into CI/CD pipelines; and detect, triage, and remediate vulnerabilities and incidents. You will also deliver security training and mentoring, and address emerging risks in AI infrastructure, LLM pipelines, and third-party dependencies.

Responsibilities

  • Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities early.
  • Design and implement security features with engineering teams and embed security in product development.
  • Lead security training, workshops, and one-to-one mentoring for developers.
  • Integrate SAST, DAST, and supply chain security tools into CI/CD pipelines.
  • Detect, triage, and respond to application vulnerabilities and incidents.
  • Monitor and address emerging risks in AI infrastructure, LLM pipelines, and third-party dependencies.

Requirements

  • 5+ years of application security experience securing cloud-native environments at product-focused technology companies, high-growth startups, or leading AI labs.
  • Strong programming and engineering skills.
  • Expertise in secure code review, threat modeling, SAST, DAST, supply chain security, product patching, and vulnerability management.
  • Experience securing CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud platforms.
  • Experience collaborating with developers to design and implement security features and best practices.
  • Experience educating and mentoring engineers on secure coding, vulnerability remediation, and emerging threats.
  • Ability to read and contribute to codebases, build security tooling, and integrate security into engineering workflows.
  • Experience building internal security tools or contributing to open-source security projects is a bonus.

See also

要針對這個職缺調整履歷嗎?

目前無法檢查您與這個職缺的符合程度;請先將履歷加入個人檔案,下次即可查看。

A new version of freehire is available