Design and build a secure development lifecycle covering security requirements, threat modeling, secure code review, and pre-release testing.
Own and operate SAST, DAST, SCA, secrets-detection, container-scanning, and IaC-scanning tooling, including AI-assisted triage and remediation.
Build secure defaults, hardened libraries, reusable security patterns, CI integrations, and automation while contributing code to engineering repositories.
Lead threat modeling and architecture security reviews for APIs, web and mobile SDKs, dashboards, and data pipelines.
Run vulnerability management, including triage, risk rating, remediation tracking, and service-level agreements for findings from scanners, penetration tests, bug bounties, and customer reports.
Perform manual application security testing and exploitation across authentication, authorization, APIs, injection, SSRF, business logic, and abuse paths.
Lead application-layer security incident investigation, containment, root-cause analysis, remediation, logging, and alerting improvements.
Provide security enablement through office hours, design consultations, secure coding training, code review, and a Security Champions program.
Partner with the Application Security Senior Manager, Compliance Lead, Cloud Platform, engineering teams, and enterprise customers on technical security priorities and evidence.
Requirements
8+ years of software engineering and/or security engineering experience, with 5+ years focused on application security.
Production-quality coding ability in TypeScript/JavaScript, Go, Python, or a similar language, along with familiarity with modern web and API architectures and CI/CD pipelines.
Deep practical application security expertise covering OWASP Top 10, authentication and authorization, API security, injection, SSRF, cryptography misuse, business-logic flaws, and abuse flaws.
Experience leading threat modeling and design-time security reviews for complex systems.
Experience deploying and tuning SAST, DAST, SCA, secrets-detection, and related security tooling in CI/CD.
Real-world experience with AI-assisted code analysis, triage, or auto-remediation and daily use of AI agents in security work.
Experience owning vulnerability management, severity rating, remediation tracking, and penetration-testing programs with remediation SLAs.
Demonstrated ability to improve security outcomes across engineering teams through influence, partnership, and effective tooling.
Experience communicating technical risk to engineers, leadership, and customer security teams.
AWS security experience, including IAM, network boundaries, secrets management, and workload identity, plus familiarity with Wiz or equivalent CSPM tooling, is preferred.
OSCP, OSWE, GWAPT, or CSSLP certification, published research, CVEs, or open-source security contributions are preferred.
Benefits
The company is 100% remote and globally dispersed, with the role open across the United States and team members able to work from almost any country subject to country restrictions.
The role offers Staff-level autonomy and the opportunity to establish a dedicated application security function from its first days.
Compliance, IT, and infrastructure responsibilities are handled by dedicated teams so the role can focus on engineering, findings, and tooling.
Fingerprint provides an inclusive work environment and encourages applicants from underrepresented groups in technology.
... at scale. You will help make security an integral part of product development rather than a separate compliance requirement. Accountabilities: As a Staff Application Security Engineer, you will serve as the technical foundation of the application security function, translating security strategy into effective engineering ...
... Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit . Job Summary At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions ...
... https://jobeax.com/link/ASqzekG1uKfCw5VF Role & Impact : We are seeking a meticulous and proactive Application Security (AppSec) Engineer to take charge of our security posture across our fintech and logistics platforms. You will work hand-in-hand with our software engineering, DevOps, and product squads to embed security best ...
... infrastructure that powers autonomous software creation. We’re looking for a Staff Security Engineer to own security across the full stack—from AI-generated applications and agent pipelines to cloud infrastructure and runtime environments . You’ll: - Secure AI-generated code, applications, and agent pipelines - Design secure ...
Planned for Conversion to FTE Task Description: Security Architect / Application Security Engineer We are looking for a hands-on Security Engineer/Architect to embed Security by Design into our applications and work directly with development teams and senior technical stakeholders. Key responsibilities: • Review, validate, ...
... collaboration with design and engineering excellence - Advance in-vehicle infotainment, safety, efficiency, and enjoyment What You'll Be Part Of We are seeking a Security Engineer to join our Global KMS team, contributing to the development and operation of foundational security services across our platform landscape. In this ...
... requirements related to personal data protection, privacy regulations, audit logging, or regulated data access. - Experience leading large cross-functional security initiatives as a staff-level engineer. Recruitment Process and Others Recruitment Process · Application Review - Phone Interview - Virtual Onsite Interview ...
... traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview We are looking for a Staff Software Engineer, Security Engineering to lead the design and development of internal platforms, tools, and automation that help protect sensitive data across ...
... and CAD engineering principles across the full design cycle - Experience working directly with customers or cross-functional teams in a technical support, applications engineering, or field engineering capacity is a strong plus Who You Are - You can walk into a room with a customer's design team, understand their timing ...
... opportunity to directly influence the future products which will be offered to our customers in a new, fast growing and large Indian market with specific needs and applications. Job Description We are seeking a Senior Staff /Principal Applications Engineer with deep expertise in power electronics and power management systems to ...