Senior Application Security Engineer II Job at Axon (Seattle)

Senior Application Security Engineer II

As a Senior Application Security Engineer, you will drive security initiatives t...

Location

United States , Seattle

Salary:

148500.00 - 237600.00 USD / Year

Axon

Expiration Date

Until further notice

Requirements

Proficiency in programming languages like Python, Java, Go, or C#
Strong experience with modern development workflows, including CI/CD pipelines and Git-based version control
In-depth understanding of vulnerabilities and secure coding practices
Hands-on experience with security tools like Snyk, Semgrep, or similar
Ability to simplify and communicate technical security concepts to diverse audiences
Demonstrated success in partnering with developers to integrate security without disrupting velocity
Experience performing secure code reviews and interpreting SAST/DAST results
Familiarity with cloud platforms (AWS, Azure, GCP) and containerization (Docker, Kubernetes)

Job Responsibility

Integrate Security into Development
Build and maintain security automation tools to seamlessly embed security checks into CI/CD pipelines
Partner with engineering teams to design secure-by-default architectures and workflows
Enable Developer Success
Act as a trusted advisor and partner for development teams, providing actionable guidance to address security issues
Deliver training and mentorship on secure coding practices, empowering teams to proactively prevent vulnerabilities
Proactively Identify Risks
Deploy and operationalize static (SAST), dynamic (DAST), and dependency (SCA) scanning tools
Lead vulnerability management efforts, ensuring critical vulnerabilities are identified, prioritized, and remediated
Advocate for a “security debt” reduction mindset to maintain long-term product integrity

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Employee Resource Groups (ERGs)
Snacks in our offices

Fulltime

Senior Cyber Security Engineer II-Identity Governance

The Sr. Cyber Security Engineer II – Identity Governance is a pivotal role respo...

Location

United States , Framingham

Salary:

139000.00 - 191000.00 USD / Year

Staples Promotional Products

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related field or equivalent work experience
10 or more years of progressively complex experience in cybersecurity
Proven experience with cybersecurity frameworks (e.g., NIST, ISO 27001)
Hands-on experience with security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering
Knowledge of network protocols and data encryption methods
Hands-on experience supporting Active Directory in an enterprise environment
Practical experience with identity and access management concepts including: user lifecycle provisioning, entitlement management, role-based access control (RBAC)
Experience building or supporting application integrations with an IGA platform
Experience supporting SSO and authentication integrations
Working knowledge of conditional access and modern authentication controls

Job Responsibility

Engineer, maintain, and secure Active Directory components including domains, OUs, group structures, service accounts, and delegated administration models
Support hybrid identity patterns integrating on‑premises Active Directory with cloud identity platforms
Partner with infrastructure and cloud teams to ensure directory services are resilient, monitored, and aligned to security best practices
Apply Zero Trust security concepts to identity systems, recognizing Active Directory and identity connectors as high‑risk control plane assets
Support privileged access separation, administrative role scoping, and least‑privilege enforcement across identity platforms
Participate in hardening initiatives to reduce privilege escalation paths and credential exposure within identity services
Implement and support SSO and federation integrations using industry‑standard protocols (SAML, OIDC, OAuth)
Assist in designing and maintaining conditional access policies based on user risk, role, device posture, and authentication context
Troubleshoot authentication and authorization issues across directories, identity providers, and integrated applications
Support joiner / mover / leaver lifecycle processes across Active Directory and downstream applications

What we offer

Competitive base salary + bonus on eligible positions
22 days plus 7 major holidays and 1 floating holiday
Company match 401(k) plan
Online and retail discounts
Physical and mental health wellness programs
Daycare, cafeteria, fitness center, and coffee shop at our HQ
Inclusive culture with associate-led Business Resource Groups

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , Warrenton

Salary:

185000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Knowledge and experience with NESSUS/ACAS and Trellix administration
Experience in Splunk role while working in a Splunk Clustered Environment
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Endpoint Security Engineering (Trellix/ePO): Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments
Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs
Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements
Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance
Vulnerability Management (ACAS/Nessus): Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners
Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures
Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories
Security Integration & Engineering: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response
Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&A) process and RMF packages for Authority to Operate (ATO)
Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , San Antonio

Salary:

160000.00 - 175000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Experience in Splunk role while working in a Splunk Clustered Environment
Knowledge and experience with NESSUS/ACAS and Trellix administration
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Experience creating custom dashboards, writing queries, building, and generating reports, and setting up alerts and notifications using all the Cyber tools (Splunk, Tenable, Trellix)
Demonstrated proficiency with recognizing and onboarding new data sources into the cyber tools and analyzing the data for anomalies and trends
Primarily responsible for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers
Use knowledge, skills, and ability to conduct research for designing, integrating, and implementing security controls into current and future products/systems thus ensuring these systems can be accredited based on compliance with the Joint Special Access Program Implementation Guide (JSIG)
Recommend the components to implement system security requirements using intimate knowledge of security design best practices for information systems throughout the system development life cycle to support the generation of security engineering products
Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server
Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted
Administration/operation of information security compliance tools/platforms with a special concentration in managing Tenable Security Center and NESSUS
Provide Tier 1, 2, and 3 maintenance support for deployed cyber security technologies
Assist with periodic and regular security assessments

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Security Engineer II - Threat Modeling & AI

Sec Eng at Uber means building for real-world impact under real-world constraint...

Location

Brazil , Sao Paulo

Salary:

Not provided

Uber

Expiration Date

Until further notice

Requirements

Senior/Staff seniority in a Security Engineer role, specifically within threat modeling or security architecture
Proficiency in Python or Go, with the ability to write modular, high-quality code and pass a technical coding interview
Experience performing offensive security testing and identifying architectural gaps in distributed systems (microservices, APIs, or cloud infrastructure)
Demonstrated knowledge of AI-specific security risks, including OWASP Top 10 for LLM or Agentic Applications
Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience

Job Responsibility

Red team AI agents and developer tools to identify vulnerabilities, creating reproducible PoCs and clear mitigation paths for engineering teams
Translate complex standards like the OWASP Top 10 for LLMs into Uber-specific reference architectures and enforceable security controls
Drive findings through to completion by partnering across disciplines—including engineering, legal, and external vendors—to land fixes in a fast-paced environment
Scale your security testing by building automated evaluation harnesses and AI-driven regression coverage to keep pace with rapid deployment
Communicate residual risk to non-technical stakeholders and leadership, translating technical debt into actionable business decisions
Own the security bar for agentic workflows and vendor onboarding, ensuring that guardrails are integrated into the developer experience from day one

Senior Engineer II - Full Stack Java

We are seeking a highly skilled Senior Software Engineer to join our dynamic tea...

Location

India , Noida

Salary:

Not provided

Daxko

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Software Engineering, or a related field
Minimum of 6 years of experience in commercial software development
Strong proficiency in Core Java and Advanced Java, with knowledge of the latest JDKs
Extensive experience with object-oriented programming and design principles
Expertise in web services, service-oriented architectures, and API development
Proficient in JavaScript, HTML5, and CSS3 for front-end development
Solid understanding of Spring and Hibernate frameworks
Experience with testing frameworks such as JUnit and Mockito
Familiarity with CICD tools, including Jenkins and GitLab
Proficiency in version control systems, particularly Git

Job Responsibility

Collaborate with product managers, architects, and other software engineers to design and implement best-in-class software solutions
Develop and maintain robust, scalable, and efficient Java-based applications using modern technologies and frameworks
Write optimized Java code, adhering to object-oriented programming principles and best practices
Design, build, and manage RESTful APIs to facilitate seamless communication between applications
Implement and maintain front-end components using JavaScript, HTML5, and CSS3
Conduct thorough code reviews and participate in technical discussions to ensure high-quality software delivery
Debug and troubleshoot complex technical issues to improve application functionality and performance
Implement comprehensive unit testing and participate in the full software development life cycle
Utilize development tools such as Git, Maven, and Jenkins to manage project dependencies and streamline deployment processes
Ensure application security by implementing best practices and adhering to compliance standards

What we offer

Hybrid work model
Leave entitlements
Hospitalization/caregiving leaves
Paid parental leaves (Maternity, Paternity, & Adoption)
Group Health Insurance
Accidental Insurance
Tax-saving reimbursements
Provident Fund (PF)
Casual work environments
Company Events and Celebrations

Fulltime

Security Engineer II

The Security Engineer II is an individual contributor who will participate and m...

Location

United States , Fountain Valley

Salary:

83940.00 - 120032.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science, Information Systems, or related field, or equivalent experience
Minimum 3 years of IT relevant experience or equivalent combination of experience plus at least 1 year of experience performing Security Engineering/Planning/Operations, preferably with SIEM or vulnerability management
Experience in medium to complex computing environments, with advanced knowledge in security technologies and services
Hands-on experience with at least two or more of the following Enterprise Security Technologies: Network Intrusion Prevention/Detection
Virtual Private Networks
SSL, IPSec, and Site-to-Site
Enterprise-Class Stateful Inspection Firewalls
Network Access Controls in context to Identity Management
Windows Server OS & Desktop OS
Network Packet Inspection

Job Responsibility

Design, build, test, and deploy new security technologies, which include the development of the operational manual and run books
Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
Investigates, recommends, evaluates, deploys, and integrates operational security tools (e.g., SIEM, vulnerability scanning) and techniques to enhance protection of corporate assets and infrastructure
Participate in technical risk assessments and security exposure analyses of systems, networks, and business applications
Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost-effectiveness
Oversees the installation, configuration, and supportive processes of security technologies
Participate in or lead the Incident Response activities
Interacts with internal and external clients on security operations requirements, identifies security processes, and develops strategies/solutions to security issues
Keeps fully abreast of trends and changing technologies as they relate to IT, Network Engineering, and Information Security fields
Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Fulltime

Senior Security Engineer

Senior Security Engineer – Remote (US) – Competitive Salary Opportunity to work ...

Location

United States

Salary:

Not provided

Orbis Consultants

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related technical field
5+ years of hands-on experience in security engineering or related roles
Expertise in secure software development, architecture design, threat modeling, CI/CD pipelines, and risk assessment
Deep knowledge of network, system, database, and application layer attack patterns and mitigation methods
Ability to clearly communicate complex concepts appropriately to multiple audience types
Coding skills necessary to discover and patch issues Node, TypeScript/React, Python
Solid understanding and experience with AWS, Heroku, Netlify, and Snowflake, including policy, configurations, and security management tooling
Proven track record with SOC 2, PCI DSS, or similar compliance frameworks and reporting
Experience working in startup or high-growth environments, fintech, and/or highly regulated industries preferred
Cloud security certifications with evidence of continued education in the area of security are a plus

Job Responsibility

Conduct regular vulnerability assessments, penetration testing, and security audits to identify and remediate security gaps across our cloud infrastructure and applications
Monitor systems for security threats, suspicious behavior, and anomalies using SIEM tools and security monitoring and vulnerability platforms like CrowdStrike and Nessus
Lead security incident response efforts, investigate suspicious reports, and implement preventative measures that may be warranted
Review and approve code (Node, React, Python) that accesses to data, authentication, or integrations, ensuring secure development practices are followed
Work closely with engineering and operations teams, including executive stakeholders and occasionally third-party service providers, to integrate security best practices into development and deployment processes
Evaluate and provide security recommendations for system architecture changes (e.g. network segmentation, microservices, virtual environments, data warehousing, etc) and new feature implementations, including the evaluation of AI enablement opportunities
Secure cloud deployments (AWS/Heroku/Netlify), including configuration of firewalls, IAM policies, VPCs, databases/data warehouses (PostgreSQL, Snowflake), API security, container security, and network monitoring
Manage and maintain access controls across server environments, implementing principle of least privilege
Advise and audit the proper handling of data in accordance with privacy and security requirements and data classification policies
Review and assess security implications of all third-party integrations and vendor relationships

Fulltime

Select Country

Senior Application Security Engineer II

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Senior Application Security Engineer II

Senior Application Security Engineer II

Senior Cyber Security Engineer II-Identity Governance

Information System Security Engineer - Senior

Information System Security Engineer - Senior

Security Engineer II - Threat Modeling & AI

Senior Engineer II - Full Stack Java

Security Engineer II

Senior Security Engineer

Our AI answers in your language