Staff Application Security Engineer

Job description

Job responsibilities

• Partner with engineering teams on fixes and secure design improvements, contributing code directly.
• Investigate findings and their practical impact, bringing clear evidence and possible solutions when engaging the responsible teams.
• Help build and maintain the application security program and its tooling, using AI to scale investigation while validating results.
• Build automation and integrate preventative controls into the software development lifecycle to reduce recurring risks and friction.

Job requirements

• 8+ years of experience in security , applications security engineering, or product security roles
• Substantial experience building and maintaining production software, with strong programming, debugging, and system design skills.
• Ability to investigate unfamiliar codebases, understand system behavior, and reason about potential misuse.
• Experience delivering technical work across teams in a large or complex engineering organization.
• Demonstrated ability to threat model systems, explain technical risks, and tradeoffs clearly and collaborate with engineers on practical solutions.
• Experience building developer tooling, automation, or software development lifecycle integrations.
• Practical experience using AI to support technical work, with the judgment to validate its output and explain the underlying reasoning.
• Experience with languages in our stack: C, C++, Go, Python, JavaScript, and web frameworks.