Application Security Engineer

• Conduct secure code reviews, threat modeling, and architecture assessments to identify and mitigate vulnerabilities early
• Work closely with engineering teams to design and implement security features, provide actionable feedback, and ensure security is embedded in product development
• Lead security training, workshops, and 1:1 mentoring to upskill developers and foster a security-first culture
• Integrate SAST/DAST and supply chain security tools into our CI/CD pipelines for continuous, automated protection
• Detect, triage, and respond to application vulnerabilities and incidents, driving remediation and continuous improvement
• Monitor and address emerging risks in AI infrastructure, LLM pipelines, and third-party dependencies

• 5+ years of experience in application security, securing cloud-native environments at product-focused tech companies, high-growth startups, or leading AI labs
• Strong programming and engineering skills
• Deep expertise in application security: secure code review, threat modeling, SAST/DAST, supply chain security, product patching, and vulnerability management
• Strong background in securing engineering infrastructure: CI/CD pipelines, secrets management, service-to-service authentication, containerized workloads, and public cloud platforms
• Hands-on experience collaborating with developers to design and implement security features and best practices
• Passion for educating and mentoring engineers on secure coding, vulnerability remediation, and emerging threats
• Systems mindset: comfortable reading and contributing to codebases, building security tooling, and integrating security into engineering workflows

Experience building internal security tools or contributing to open-source security projects