Top Application Security Engineer Jobs

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

Design and implement application security solutions for Moveworks' AI platform. Lead design reviews, threat models, security code reviews, and targeted penetration tests. Triage SAST/DAST and bug bounty findings, maintain CI/CD scanning and AppSec tools, and partner with ML, infrastructure, product, and engineering teams to embed secure practices at scale.

Owner of application-layer security across consumer flows, GraphQL APIs, and AI-driven tooling. Build and operate AppSec tooling and triage, run threat modeling and security reviews, lead HackerOne and offensive testing, automate vulnerability triage and remediation with AI agents, and partner with engineering to harden authentication, authorization, and container/cloud security.

Own application-layer risk detection and remediation across consumer flows, GraphQL APIs, and internal tools. Build and operate AppSec tooling, manage HackerOne, run threat modeling and security design reviews, create CI guardrails, automate vulnerability triage with AI agents, and lead offensive testing and red team exercises to harden authentication, authorization, and cloud/container security.

Lead penetration testing and vulnerability remediation for web, mobile, and medical device applications, ensuring compliance with healthcare regulations.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

The Senior Application Security Engineer oversees application security, works on AI threat modeling, and collaborates with engineers to enhance security infrastructure and compliance with regulations.

The Security Engineer role involves identifying vulnerabilities, automating tasks in penetration testing, and creating security reports for various audiences.

The Senior Application Security Engineer will implement security controls for space systems, ensuring compliance with government standards while collaborating with engineering teams to enhance security practices and respond to threats.

Lead application and cloud security within DevSecOps: own CI/CD security controls, manage vulnerability lifecycle, tune SAST/DAST/SCA tooling, enforce IaC and cloud security best practices, run threat modeling and security reviews, automate DevSecOps operations, and support incident response and security documentation.

Hands-on senior application security engineer partnering with product and engineering teams to perform threat modeling and secure architecture reviews, embed secure SDLC practices, integrate CI/CD security tooling, manage vulnerabilities, secure cloud, API, identity and AI-enabled features, create reusable security patterns, mentor engineers, and support incident response and compliance readiness.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

Lead application and product security across web, mobile, API, AI/CV, and cloud-native systems. Drive secure SDLC, DevSecOps, CI/CD and supply chain security, threat modeling, tooling/automation, vulnerability remediation, and developer enablement while partnering closely with engineering teams.

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Responsible for maintaining and implementing SAP software applications, managing security configurations, and providing application support and testing.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Implement and maintain application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security tests into CI/CD, triage and report findings, support developers on remediation, and evangelize secure development practices across teams and cloud/container environments.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security tests into CI/CD and cloud pipelines, triage and deduplicate findings, support developers in remediation, evangelize secure development practices, and coach junior engineers.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security into CI/CD and cloud workflows, triage findings, support developers on remediation, produce security reports, evangelize secure development practices, and coach junior engineers to scale DevSecOps across the organization.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The Application Security Engineer will identify security gaps, build tooling, conduct code reviews, and drive vulnerability remediation, ensuring secure product delivery.