Lead Application Security Engineer

We’re looking for a Lead Application Security Engineer to help secure our software development lifecycle and keep our products safe from vulnerabilities. You’ll work closely with developers, Dev Ops, and security teams to build security into every step of the development process—from design reviews to code analysis to runtime monitoring.

This role is a mix of hands‑on technical work, security tooling, and coaching developers on best practices.

• Embed security into development: Partner with engineering teams to integrate security into SDLC, CI/CD pipelines, and code reviews.
• Find and fix vulnerabilities: Conduct static and dynamic analysis (SAST/DAST), perform manual code reviews, and run pen tests on web and mobile apps.
• Automate security checks: Deploy and manage security tools like Snyk, Veracode, Checkmarx, etc.
• Guide secure design: Participate in architecture reviews and threat modeling sessions.
• Promote security culture: Provide training and support to developers on secure coding and OWASP best practices.
• Respond to security incidents: Assist in investigations and remediation of application security issues.

• 7+ years of experience in application security or software engineering with a security focus
• Solid understanding of security frameworks and compliance standards (NIST CSF, ISO 27001, SOC 2).
• Expertise in CI/CD tools such as Git Hub, Jenkins, Git Lab CI/CD, Azure Dev Ops, or similar
• Experience with cloud security (AWS, Azure, or GCP)
• Strong communication skills—you know how to collaborate and coach, not just point out problems

• Work on meaningful security challenges in a collaborative environment
• Help shape our security program and make a real impact
• Stay at the cutting edge of application security and Dev Sec Ops