Senior Application Security Engineer Job at Zip (San Francisco)

Senior Security GRC Engineer

The Senior Security GRC Engineer at Atlassian will be instrumental in implementi...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

5-7+ years experience in a similar role, preferably in a large-scale SaaS/Product environment
Expertise and experience working in security-focused roles
Experience with application security, especially web applications
Experience in cloud security architecture and infrastructure
Experience providing SME knowledge and guidance to stakeholders and engineering functions
Experience working with internal/external audit and leadership teams
Solid knowledge of cybersecurity principles, risk management strategies, and IT governance frameworks
Strong communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an understandable way
Relevant certifications such as CISSP, CISM, or CRISC would be beneficial
Scripting experience to automate recurring tasks (JQL, SQL, Python, Go)

Job Responsibility

Deliver technical expertise and innovation, providing security guidance to teams and promoting the adoption of industry-leading methodologies to build secure products by default
Drive technical solutions in security and risk management
Leverage data analytics and visualization, deriving actionable insights from security governance, risk, and compliance data
Promote automation and tooling, encouraging the use of the latest security tools to enhance product security processes
Proactively identify and mitigate risks, recognizing potential security threats or compliance concerns specific to product security
Collaborate with product security teams, implementing security controls and best practices
Regularly evaluate and report, assessing the effectiveness of security controls
Influence and align stakeholders, working with security engineers and stakeholders to drive alignment on security initiatives
Stay informed on regulatory awareness and compliance, keeping up with the latest developments in legislative, regulatory, and industry security requirements

What we offer

health coverage
paid volunteer days
wellness resources

Fulltime

Senior Security Engineer

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-fo...

Location

Canada , Toronto

Salary:

137000.00 - 207000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

Proficiency with Application & Product Security typically associated with 4 - 5 years of experience in a Security Engineering role working with a cloud-native, microservices environment, preferably AWS
Familiarity with cloud-native product technologies including: Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, GHAS, Semgrep, etc.)
CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
Product security event logging standards and analysis tools (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
Security Incident Response & Risk Management processes and tools
Proficiency in at least one programming language and framework (e.g. Python, Bash, Phoenix/Elixir, Java, Ruby on Rails), typically associated with 3 - 4 years of experience with the language/framework
Have exceptional written, oral communication, and interpersonal skills
Organizational skills with the ability to successfully manage multiple priorities and deadlines

Job Responsibility

Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections
Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks
Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks
Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents
Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks. Maintain a strong appetite for challenging problems with a high degree of ownership
Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences
Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption
Establish and uphold baseline standards and hardened configurations for platform components
Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments

What we offer

Competitive salary
Comprehensive benefits package from day one
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)

Fulltime

Senior Application Security Engineer

This role involves embedding security into software delivery pipelines, designin...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

5–8+ years of experience in Application Security, Product Security, or Secure Software Development
hands-on experience securing software delivery pipelines (CI/CD) and source code repositories (GitHub, GitLab, Jenkins)
knowledge of supply chain security frameworks and controls (e.g., SLSA, NIST SSDF)
familiarity with secrets management, artifact signing (Sigstore, Cosign), and build integrity practices
hands-on experience with WAF tuning, API security controls, and vulnerability remediation
proficiency with one or more programming languages (Python, Java, Go, JavaScript/Node.js)
experience with SAST, DAST, SCA, and container image scanning tools
cloud security experience with AWS, Azure, or GCP
deep understanding of OWASP Top 10 (Web + API), CWE, and secure coding practices

Job Responsibility

secure SDLC & DevSecOps integration
design and implement security controls for build and release pipelines (GitHub Actions, Jenkins, GitLab, Azure DevOps)
ensure code integrity via signing, artifact scanning, and build provenance
automate SAST, DAST, SCA, and container image scanning as part of the software delivery pipeline
identify and remediate misconfigurations in pipeline environments and access control
design, implement, and monitor WAF rules and API protections
perform API risk assessments
champion secure design patterns
conduct secure code reviews and support automation of testing pipelines
triage, prioritize, and track security issues identified in code, pipelines, and deployed environments

What we offer

comprehensive suite of benefits that supports physical, financial and emotional wellbeing
programs catered to helping you reach career goals
inclusive work environment

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Senior Security Engineer

As a Senior Security Engineer, you will play a crucial role in safeguarding Dash...

Location

France , Paris

Salary:

Not provided

Dashlane

Expiration Date

Until further notice

Requirements

Familiarity with application security best practices, including threat modeling
Experience operating within an SDLC program
An understanding of CI/CD pipelines and their security implications
Familiarity in Identity and Access Management (IAM) frameworks and protocols (Passkeys, SAML, OAuth, SCIM, etc)
Interest in enabling secure use of AI tools to drive efficiency, creativity, and impact internally
Communication & Collaboration: You engage and listen empathetically to others, adjusting your communication style to fit the audience and message.
Mentoring: You enjoy using your knowledge and experience to support and uplevel those around you.
Motivated Learner: You learn new technologies and processes quickly, and understand where to look for knowledge when you need it.
Adaptability: You are a jack or jane of all trades - you’re comfortable digging into non-technical parts of the business to provide security support and guidance.

Job Responsibility

Help drive the continuous improvement of Dashlane’s security program across the product and company
Assist with architecture design reviews, threat modeling, and technical security assessments of Dashlane’s product (application and infrastructure) to identify security risks and provide mitigation guidance
Ensure security best practices are integrated throughout the software development lifecycle (SDLC)
Build upon and scale Vulnerability Management to ensure the team can track, analyze, and manage vulnerabilities and their remediation
Perform risk assessments of Dashlane’s internal systems, environments, assets, and data, and implement security best practices accordingly
Participate in Compliance and Incident Response activities

What we offer

Flex Benefits - monthly amount to be allocated to a pool of benefits of your choice.
Health insurance covered by Dashlane.
Extended time off and well-being days - add 5 days to you vacation quota, plus your birthday day off, and 4 extra days (one per quarter) to acknowledge the importance of your wellbeing.
Equal Parental leave - regardless of gender, up to 20 weeks fully paid leave to take care of their new baby, within the first year of birth or adoption.
Mentorship program - select your mentor from our internal pool and continue your learning path!
Flexible working hours - depending on the role, determine a schedule that fits your need, in alignment with your manager.
Donation matching program - give back to the community and support actions that lead to positive social impact under the historically marginalized communities. Every donation will be matched by Dashlane.
Mental health services through Spring Health for you and for you and family members.
Team buildings & seasonal social events.
Weekly lunch in the office and monthly happy hour and much more.

Fulltime

Senior Frontend Engineer (Application Security)

At Easygo, our DevSecOps team is at the heart of our engineering, security and o...

Location

Australia , Melbourne

Salary:

Not provided

Easygo Gaming

Expiration Date

Until further notice

Requirements

Bachelor's/Master's degree in Computer Science or equivalent practical experience
7+ years of hands-on experience in software engineering, with a primary focus on security engineering
Strong understanding of code architecture and design principles
Excellent problem-solving skills and the ability to thrive in a fast-paced, dynamic environment
Strong communication skills for effective collaboration with teams and stakeholders
Analytical mindset to address complex technical challenges and devise innovative solutions
Positive attitude and eagerness to learn new technologies to grow as a security engineer

Job Responsibility

Lead by example, and drive the adoption of secure software development lifecycle (SSDLC) practices. This includes performing threat modelling, providing secure coding guidance to development teams, and embedding security requirements early in the design phase
Own, improve, execute and manage various security tests, including SAST, DAST, and SCA, to identify vulnerabilities. Analyse test results and prioritise findings. Fix what you find, and work with developers to ensure timely remediation
Implement and maintain automated security controls within the CI/CD pipeline. This involves integrating security tools to enable continuous security testing and monitoring, making security an integral part of the DevSecOps process
Deploy and configure Web Application Firewalls (WAFs) and Runtime Application Self-Protection (RASP) solutions to protect from real-time attacks. Respond to urgent application security incidents as needed
Take ownership of the platform vulnerability management program. This involves tracking, prioritising, and remediation of security flaws found in applications, ensuring all vulnerabilities are addressed and verified
Actively engage in hands-on coding, testing, debugging, and troubleshooting to ensure code quality, scalability, and maintainability
Write efficient, scalable, and maintainable code, adhering to coding standards and best practices
Innovate within the team by pushing for improvements and driving constructive changes to enhance team performance and efficiency
Analyse complex problems and provide effective solutions, contributing to team goals and initiatives
Lead and independently complete medium-sized projects or initiatives from start to finish

What we offer

Access to over 9,000 courses across our Learning and Development Platform
EAP access for you and your family
Be rewarded with lucrative annual bonuses
Give back with a paid volunteer day
Fuel your day with daily breakfast and open pantries brimming with unlimited snacks and refreshments, all on the house
Break up the week with on site remedial massage Wednesdays
In house full-time barista’s providing you your daily coffee needs
Weekly team lunches and happy hour in the office from 4pm on Fridays
Enjoy a bustling office with the option for up to 2 days work from home per week
Fun office environment with pool tables, table tennis and all your favourite gaming consoles

Fulltime

Senior Security Engineer

The Senior Security Engineer will provide hands-on technical leadership within t...

Location

United Kingdom , Leeds; Thame

Salary:

65000.00 - 75000.00 GBP / Year

PEXA UK

Expiration Date

Until further notice

Requirements

Proactive, can-do attitude to get things done quickly and efficiently
Strong collaboration and communication skills
Willingness to contribute ideas to the security programme
Demonstratable first-hand experience in achieving organisational adherence to security best practices
Experience in the practical protection of a remote working laptop estate and SaaS cloud solutions
Experience in identity and access management solutions
Experience in device business automation and updates
Experience in the security aspects of cloud web application hosting and defence measures like WAF

Job Responsibility

Maintenance and Operational Security: Ensure all security solutions remain operationally effective
Ensure technical teams timely patch applications, systems, software, and hardware
Maintain and audit secure configurations for devices, applications, and cloud environments
Access Control and Identity Management: Conduct regular user and privileged account reviews
Manage and monitor Privileged Identity Management (PIM) profiles and elevated access accounts
Coordinate with IT and HR for onboarding/offboarding
Tool, Infrastructure, and Encryption Management: Maintain and optimise security infrastructure and tools
Oversee encryption key and certificate management
Work with vendors and internal teams to ensure tools remain current
VPN, Network & Firewall Security: Design, configure, and maintain secure VPN and Zero-Trust network solutions

What we offer

Your growth: We encourage you to hit your personal and professional learning and development goals with our tailored programs and tools
Your wellness: We care about your holistic wellbeing
Your work/life blend: We want to help you create your ideal work/life blend

Fulltime

Senior Product Security Engineer

Ready to make an impact on the security of products from the ground up? Join our...

Location

United States , Austin

Salary:

Not provided

Take-Two Interactive Software, Inc.

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Technology, or a similar field, or equivalent experience
At least 5 years of demonstrated experience in application security, ideally within the gaming or technology sectors
Validated expertise in pentesting, security architecture, risk management, and securing CI/CD pipelines to ensure seamless and secure software delivery
Extensive knowledge of common and complex security vulnerabilities, along with effective mitigation techniques
Ability to translate design documents into security-focused guidelines and requirements for product development
Adapt quickly to new technologies, languages, and solve challenges outside your expertise
Travel: No routine travel required
occasional travel as needed.

Job Responsibility

Develop threat models for a variety of applications and games to prioritize scope and use cases for security testing
Execute hands-on penetration tests and red team exercises to identify vulnerabilities in applications, infrastructure, and services
Conduct manual and automated secure code reviews in languages such as C#, Java, Python, and JavaScript, providing clear, actionable guidance to developers on vulnerability remediation
Triage, validate, and manage vulnerability reports from our bug bounty program, working with external researchers and internal teams on resolution
Develop and implement security automation tools to improve the efficiency and effectiveness of security processes
Provide security architecture and design guidance to development teams, ensuring secure coding practices are followed
Partner with teams to define and execute security strategy, driving security priorities across the organization
Stay ahead of emerging security threats, seeking and advocating for new technologies to address complex risks.

What we offer

Medical (HSA & FSA), dental, vision, 401(k) with company match, employee stock purchase plan, commuter benefits, in-house wellness program, broad learning & development opportunities, a charitable giving platform with company match
Fitness allowance, employee discount programs, discounted games & events and stocked pantries.

Fulltime

Senior Application Security Engineer

Zip

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
February 18, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Application Security Engineer

Senior Security GRC Engineer

Senior Security Engineer

Senior Application Security Engineer

Senior AI Security Engineer

Senior Security Engineer

Senior Frontend Engineer (Application Security)

Senior Security Engineer

Senior Product Security Engineer

Senior Application Security Engineer

Zip

Location:United States , San Francisco

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:February 18, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Application Security Engineer

Senior Security GRC Engineer

Senior Security Engineer

Senior Application Security Engineer

Senior AI Security Engineer

Senior Security Engineer

Senior Frontend Engineer (Application Security)

Senior Security Engineer

Senior Product Security Engineer

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
February 18, 2026