Join our dynamic team as a Senior Application Security Engineer, where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also help shape how we use AI responsibly in both our product and our engineering processes. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization.
What You’ll Do- Collaborate with product and engineering teams to integrate security principles into the design and architecture of products.
- Conduct threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface.
- Manage the Secure Development pipeline including code security and 3rd party library supply chain security.
- Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy.
- Triage Bug Bounty findings and responsibility disclosed vulnerabilities.
- Able to participate in on-call rotation.
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- 5+ years in application or product security or a related role.
- Proven partnership with engineering teams, bringing security expertise to the planning and development process.
- Knowledge of encryption, authentication, and secure communication protocols.
- Familiarity with tools like SAST, DAST, and penetration testing frameworks.
- A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
- Excellent communication and ability to explain complex security concepts to non-technical stakeholders.
- Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
- Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.
- Excellent collaboration and communication skills.
- Expertise in at least one programming language, familiarity with Python and Go.
- Distributed computing and related vulnerability experience.
- Running a Security Champions program.
- Open Source automation or automation projects.
- Expertise in other areas of security.
- Security conference talks or published research.
- The estimated pay range for this role is $180,000 - $225,000, depending on qualifications and location.
- This role is eligible to participate in Temporal's equity plan.
- Unlimited PTO, 12 Holidays + 2 Floating Holidays
- 100% Premiums Coverage for Medical, Dental, and Vision
- AD&D, LT & ST Disability, and Life Insurance (Standard & Supplemental Available)
- Empower 401K Plan
- Additional Perks for Learning & Development, Lifestyle Spending, Home Office Setup, Professional Memberships, WFH Meals, Internet Stipend and more!
Paid Time Off (PTO) and Benefits outside the United States vary by country, and are issued in partnership with Remote.com. Additionally, Temporal offers perks to all international employees for learning & career development, a lifestyle spending account, home office setup, professional memberships, work-from-home meals, and access to the Calm app for mental wellness.
Travel
Temporal is a globally distributed, collaborative team that values opportunities for in-person connection. Occasional travel may be required for company events, team offsites, and other meaningful moments that bring us together.
Skills Required
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
- 5+ years in application or product security or a related role
- Proven partnership with engineering teams to embed security in planning and development
- Knowledge of encryption, authentication, and secure communication protocols
- Familiarity with SAST, DAST, and penetration testing frameworks
- Deep understanding of application architecture and ability to identify vulnerabilities across multiple programming languages
- Excellent communication skills to explain complex security concepts to non-technical stakeholders
- Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control
- Experience with multi-tenant security architecture, data plane isolation, control plane hardening, and preventing cross-tenant data leakage
- Expertise in at least one programming language; familiarity with Python and Go
- Able to participate in on-call rotation
- Distributed computing and related vulnerability experience
- Experience running a Security Champions program
- Open source automation or automation project experience
- Security conference talks or published research
- Expertise in other areas of security (additional specialties)
Temporal Technologies Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Temporal Technologies and has not been reviewed or approved by Temporal Technologies.
-
Healthcare Strength — Healthcare coverage is described as 100% employer-paid for medical, dental, and vision, with AD&D, short- and long-term disability, and life insurance included. Feedback suggests this breadth and cost coverage is a strong differentiator for a remote-first employer.
-
Leave & Time Off Breadth — Time off includes unlimited PTO alongside 12 standard holidays and 2 floating holidays. Feedback suggests this structure supports rest and recharge across teams.
-
Wellbeing & Lifestyle Benefits — Wellbeing and remote-work support include a home office stipend, internet reimbursement, WFH meals, Calm app access, a lifestyle spending account, and learning/professional membership budgets. Feedback suggests these perks enhance overall total rewards beyond base pay.
Temporal Technologies Insights
What We Do
Temporal develops and distributes the world's leading open source durable execution system. We make code fault tolerant, durable and simple. Innovative companies like Datadog, Glovo, Indeed, Netflix, Qualtrics, Remitly, Snap and Yum! Brands build their services and applications with Temporal to make them reliable to run, productive to enhance and easy to troubleshoot and repair. More than a decade in the making, Temporal is powered by veterans behind some of the industry's most loved systems technologies, programming frameworks and open source communities as well as investors like Amplify Partners, Sequoia Capital and Index Ventures.
