Senior Enterprise Application Security Engineer Job at Archer Aviation (San Jose)

Senior Security Engineer - Application Security

This is an opportunity to join K's critical InfoSec team as a Senior Security En...

Location

United States , New York

Salary:

150000.00 - 185000.00 USD / Year

K Health

Expiration Date

Until further notice

Requirements

5+ years of experience in Information Security, Cloud Security, IT Security, and/or Application Security
Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities
Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines
Proven experience establishing a cutting-edge security posture, particularly within the regulated healthcare technology field
Excellent communication skills, capable of translating complex security risks into clear, actionable advice for technical and non-technical stakeholders
Expertise in compliance, security, and regulatory areas such as
HIPAA, PHI, AKS, SOC 2, ISO, GDPR, etc.
Flexibility in covering a rotation for critical on-call support responsibilities

Job Responsibility

Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC)
Design, deploy, and continuously monitor cloud security architecture across our cloud environments, ensuring performance and resilience
Manage the security posture of K’s core IT infrastructure, internal networks, and perimeter defenses, mitigating threats before they impact operations
Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems
Conduct proactive vulnerability assessments, penetration tests, and security reviews to identify and remediate potential weaknesses in our platforms
Collaborate with engineering teams to integrate security tools and practices into continuous integration/continuous deployment (CI/CD) pipelines

What we offer

Hybrid work schedule with weekly lunches and stocked fridges
Monthly social committees for company events
18 vacation days, 9 company holidays, 5 sick days, and 2 personal days
Stock options for every full-time employee
Paid parental leave
401k benefit
Commuter Benefits
Competitive health, dental, and vision insurance options

Fulltime

Senior Application Security Engineer

We are seeking an experienced Application Security Engineer to join our team tha...

Location

Egypt , Cairo

Salary:

Not provided

Coca-Cola HBC

Expiration Date

Until further notice

Requirements

5+ years in information security and 2+ years in software development
Bachelor’s degree in computer science, Information Security, or related field, or equivalent
At least one Cyber Security related certification, (e.g. ISC2 CISSP, EC-Council CEH, ISACA’s CSX, Microsoft Azure Security Associate, AWS Certified Security Specialty)
Any Application Security certification, (e.g. EC-Council CASE, ISC2 CSSLP, OffSec OWSA, GIAC CWAD)
Dedicated and proactive, finding opportunities and leading initiatives independently
Deep understanding of enterprise, cloud and cloud-native architectures and their secure design
Skilled in multiple programming languages (e.g., .NET, JavaScript, Python)
Proven expertise in guiding security development and code evaluations and providing actionable, risk-based technical recommendations
Knowledge of application security best practices such as OWASP Top 10, OWASP SAMM/DSOMM, OWASP ASVS/MASVS
Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors

Job Responsibility

Advance the application security strategy through multi-functional initiatives and cultural influence
Lead security initiatives across the SDLC and improve development practices through scalable automation
Conduct and guide security requirements and threat modeling early in design phases
Partner with product management, platform engineering, development and cyber defense teams to align business goals with security needs
Lead security architecture, design and code reviews
Perform hands-on security testing to identify risks and drive remediation with development teams
Drive software supply chain security practices to ensure protection against code, build, and artifact tampering across the CI/CD pipeline
Balance business and security risks through technically grounded, pragmatic recommendations
Translate lessons learned into reusable organizational assets that enhance overall security posture
Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability

What we offer

Coaching and mentoring programs
Development opportunities
Equal opportunity employer
Learning programs
Work with iconic brands
Supportive team
Volunteering Opportunities
Wellbeing program

Fulltime

Senior Security Engineer, Security Operations

The senior security engineer role provides a unique opportunity to shape the sec...

Location

United States , REMOTE; SAN FRANCISCO; ROSEVILLE; LEHI; WEST PALM BEACH; IRVINE

Salary:

146000.00 - 170000.00 USD / Year

GoodLeap

Expiration Date

Until further notice

Requirements

Strong communicator with the ability to lead technical architecture discussions, drive technical decisions, and effectively communicate with non-technical audiences
Expertise in security event management, monitoring, threat hunting, incident response, playbook creation, orchestration/automations
Experience with threat modeling methodologies
Expertise with EDR solutions/platforms, such as CrowdStrike, S1, Palo Alto Cortex EDR
Experience with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, and IAM (knowledge of GCP and/or Azure is a plus)
Proven ability to establish credibility and build trust with business, engineers, and operational staff
Experience designing, configuring, and implementing security and fraud monitoring for core enterprise systems, e.g., ERP, HCM, Salesforce
Experience working with and creating solutions based AI and ML toolsets – e.g., creation of AI skills, agents, MCP clients, vibe coding
Strong understanding of both human and non-human identity management and common enterprise and consumer authentication standards and use cases
Practical experience with CI/CD pipelines and DevOps tools, including Infrastructure-as-Code (IaC) tools like Terraform, Pulumi, or CDK

Job Responsibility

Lead, participate in, and contribute to security and fraud monitoring, detection, and response activities, inclusive of investigations, threat hunting,etc. Create playbooks for specific incident response scenarios
Identify potential misuse and abuse cases in enterprise systems, propose solutions to detect these scenarios, and identify and implement monitoring and detection solutions for such scenarios
Support or develop components of the security analytics platform
Support embedded (product) security team
Support general security operations team with vulnerability management, tools management, and more

What we offer

bonus
equity

Fulltime

Senior Security Engineer - AI Products & Platforms

We are Citi's Application, Platform and Engineering team, a start-up with the ex...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
Thrive in a results-driven environment, where flexibility fuels impact
Be a game-changer, ready to step beyond your designated role
Love the synergy of pair programming? So do we!
Seize the opportunity to secure AI applications at scale. Jump in!
A relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
State-of-the-art security engineering with Go, Python, JavaScript - you build both security tools and secure production systems in fast-paced environments
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials, and extending Vault functionality for enterprise-scale secrets management

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Ethical hacking and red team activities - Conduct penetration testing, vulnerability research, and attack simulation to make our products bulletproof
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks through hands-on testing
Lead "shift left" security - Embed security practices throughout our rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
A discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
hybrid working model (up to 2 days working at home per week)
business casual workplace

Fulltime

Senior Security Engineer – PAM

We are looking for a Senior Security Engineer – PAM to join our Global Informati...

Location

United States , Burbank, CA, Seattle, WA or New York City

Salary:

90.00 - 97.00 USD / Hour

Software Resources

Expiration Date

Until further notice

Requirements

Minimum of 5+ years of experience in cybersecurity or identity and access management, with at least 3 years focused on Privileged Access Management
Hands-on experience administering enterprise PAM platforms such as CyberArk (EPV, PSM, PVWA, CPM, CCP) or CA PAM (Broadcom Privileged Access Manager)
Proficiency in scripting and automation with PowerShell and/or Python for PAM workflows
Experience integrating PAM solutions with enterprise directories (Active Directory, LDAP) and cloud platforms (AWS, Azure, GCP)
Strong understanding of PAM concepts: credential vaulting, session recording, just-in-time access, least privilege, secrets management, and SSH key management
Demonstrated experience supporting compliance and audit processes (SOX, PCI-DSS, or similar frameworks)
Ability to work effectively across cross-functional teams in a large enterprise environment
BA/BS Degree Comp Sci/IS or related field

Job Responsibility

Design, implement, and maintain enterprise PAM solutions including privileged account vaulting, session management, just-in-time access, and secrets management
Administer and operate PAM platforms (e.g., CyberArk, CA PAM) across on-premises and cloud environments, ensuring high availability and security policy enforcement
Develop and maintain automation for PAM onboarding, account provisioning, rotation, and reconciliation using PowerShell, Python, REST APIs, and Terraform
Collaborate with IT, Cloud, DevOps, and application teams to integrate PAM controls into CI/CD pipelines, cloud platforms, and third-party systems
Define and enforce privileged account policies aligned with security standards, regulatory requirements, and industry best practices
Lead PAM-related risk assessments, access reviews, and audit response activities
Troubleshoot complex PAM platform issues, driving root cause analysis and permanent remediation
Mentor junior engineers and contribute to team documentation, runbooks, and architectural standards
Identify opportunities to reduce the privileged access attack surface through improved tooling, automation, and process improvements
Support knowledge sharing across the PAM team by leading technical discussions, reviewing peers' work, and contributing to team learning initiatives

What we offer

medical coverage
dental coverage
vision coverage
401(k) with company match
short-term disability
life insurance with AD&D

Fulltime

Senior Application Engineer

Our client, a globally recognized premium retail and outdoor apparel brand, is e...

Location

Canada , North Vancouver

Salary:

59.13 - 75.55 USD / Hour

Randstad

Expiration Date

Until further notice

Requirements

8+ years of experience developing solutions on the Salesforce platform (specifically Service Cloud and Sales Cloud) within Agile environments
Highly proficient in developing complex, scalable features using Flows, Apex, Lightning Web Components (LWC), and asynchronous processing in high-volume environments
Proven experience designing and implementing robust integrations between Salesforce and external systems using REST, SOAP, and GraphQL APIs, emphasizing performance and enterprise architecture standards
Expertise leveraging Git, GitHub, and SFDX in VS Code to enable efficient version control, collaborative development, and CI/CD best practices
Deep understanding of customer identity models, including Contact, Person Account, Individual, and unified customer profile patterns
Exceptional communication, problem-solving, and documentation skills, with a flexible and adaptable mindset when faced with ambiguity

Job Responsibility

Own and lead a medium-sized product domain within the Core Customer 360 platform, balancing out-of-the-box Salesforce configurations with custom programmatic design
Take complex user stories, break them down into sub-tasks, and execute them with relative ease and very little oversight beyond high-level direction
Participate extensively in code reviews, define coding standards for the team, and mentor junior/intermediate developers via pair programming
Lead ongoing platform security assessments, review Salesforce release updates, and document system components to refactor and optimize performance
Partner effectively with non-technical business members, helping to identify requirements issues and course-correcting strategies early
Move beyond simply checking off tasks—identify and build business cases for future technical enhancements and system optimization

What we offer

Premium Global Brand
Flexible Work Model
Architectural Influence
Collaborative & Active Culture

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , Warrenton

Salary:

185000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Knowledge and experience with NESSUS/ACAS and Trellix administration
Experience in Splunk role while working in a Splunk Clustered Environment
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Endpoint Security Engineering (Trellix/ePO): Expertly design, configure, and maintain Trellix components (ePO, Trellix Agent, DLP, HIPS, Policy Auditor, ABM, and VSE) across Windows and Linux environments
Author and deploy endpoint security policies for ENS modules (Threat Prevention, Firewall, Web Control) based on DISA STIGs and organizational needs
Develop custom signatures, rules, and exceptions to address zero-day threats and specific operational requirements
Validate custom exceptions to ensure uninterrupted operation of mission-critical processes without compromising compliance
Vulnerability Management (ACAS/Nessus): Design enterprise-wide vulnerability scanning strategies and manage the deployment of Security Centers and Nessus scanners
Serve as the final escalation point for complex scan issues, credentialing problems, and system communication failures
Configure automated reporting of compliance data to continuous monitoring systems and risk-scoring repositories
Security Integration & Engineering: Integrate Trellix and ACAS with tools such as Splunk, XSOAR, and ServiceNow to automate workflows and enhance incident response
Provide authoritative recommendations and ACAS-generated artifacts to support the Assessment and Authorization (A&A) process and RMF packages for Authority to Operate (ATO)
Lead the maintenance and scalability of test, development, and operational environments, collaborating with Network and DevSecOps teams to enhance resilience

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Information System Security Engineer - Senior

In support of a challenging, critical, and rewarding program that provides integ...

Location

United States , San Antonio

Salary:

160000.00 - 175000.00 USD / Year

Amentum

Expiration Date

Until further notice

Requirements

Must have active Top-Secret clearance with SCI or TS with the ability to acquire SCI
Experience in Splunk role while working in a Splunk Clustered Environment
Knowledge and experience with NESSUS/ACAS and Trellix administration
Must be able to work a 40-hour work week, normally Monday through Friday
Ability to work overtime during critical peaks and be available to meet last-minute requests for overtime if needed
Ability to travel (5-10%) primarily within 75 miles
Familiarity with MS Office applications such as Excel, Word, Outlook, SharePoint, Project, and Visio
Exceptional attention to detail
excellent verbal and written communication skills
strong critical thinking, organizational, time-management, and problem-solving skills

Job Responsibility

Experience creating custom dashboards, writing queries, building, and generating reports, and setting up alerts and notifications using all the Cyber tools (Splunk, Tenable, Trellix)
Demonstrated proficiency with recognizing and onboarding new data sources into the cyber tools and analyzing the data for anomalies and trends
Primarily responsible for maintaining the test and operational environments to include all cybersecurity tool sets and collaborating with systems and network engineers
Use knowledge, skills, and ability to conduct research for designing, integrating, and implementing security controls into current and future products/systems thus ensuring these systems can be accredited based on compliance with the Joint Special Access Program Implementation Guide (JSIG)
Recommend the components to implement system security requirements using intimate knowledge of security design best practices for information systems throughout the system development life cycle to support the generation of security engineering products
Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server
Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host Intrusion Prevention System, Policy Auditor, Asset Baseline Monitor, and Virus Scan Enterprise) on Windows and Linux creating exceptions to allow essential processes to continue uninterrupted
Administration/operation of information security compliance tools/platforms with a special concentration in managing Tenable Security Center and NESSUS
Provide Tier 1, 2, and 3 maintenance support for deployed cyber security technologies
Assist with periodic and regular security assessments

What we offer

Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance

Fulltime

Select Country

Senior Enterprise Application Security Engineer

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?