Top Application Security Engineer Jobs

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools; conducting threat modeling; integrating security controls into CI/CD pipelines; prioritizing vulnerability remediation; developing security automation; and communicating risks and metrics to engineering and business stakeholders.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, prioritizing vulnerability remediation, and integrating security controls into CI/CD pipelines. The role partners with engineering teams, develops automation, establishes security metrics, documents processes, and communicates risks to technical and nontechnical stakeholders. AWS/cloud security, software development, infrastructure-as-code, and modern web application security experience are required.

Deploys and tunes application security testing tools, interprets vulnerabilities, performs threat modeling, and integrates security controls into CI/CD pipelines. The role partners with engineering teams to improve secure coding, automate security processes, establish security metrics, and drive remediation. Requires application security expertise, software development knowledge, cloud and infrastructure-as-code experience, and strong communication skills.

Designs and maintains secure applications while advancing the enterprise Application Security program. Responsibilities include operating SAST, DAST, SCA, and secrets-scanning tools; threat modeling; secure design and code reviews; vulnerability remediation; penetration testing; developer education; software supply chain risk management; incident response; and collaboration with cloud, platform, and development teams. The role also supports security frameworks, metrics, tool evaluations, risk assessments, and application security program maturity.

The Senior Application Security Engineer strengthens secure coding and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, interpreting scan results, conducting threat modeling, and integrating security controls into CI/CD pipelines. The role establishes application security metrics, automates security improvements, documents key processes, and partners with engineering teams to prioritize and remediate meaningful vulnerabilities. Responsibilities include securing AWS cloud applications, APIs, authentication, authorization, secrets, and infrastructure-as-code environments.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, prioritizing vulnerability remediation, developing security automation, and establishing application security metrics and documentation. The role partners closely with engineering teams and stakeholders to improve security without slowing product delivery.

Secures and sustains federal application systems across their software lifecycle. Responsibilities include application administration, configuration, security impact assessments, ATO/ATT support, continuous monitoring, logging compliance, vulnerability remediation, change management, and SOP development. The role also integrates machine learning and artificial intelligence into security tools, evaluates software products, and supports incident alerting and reporting. A TS/SCI clearance is required.

Administer, secure, configure, and maintain agency application systems throughout their lifecycle. Support ATO/ATT documentation, continuous monitoring, security impact assessments, vendor risk evaluations, logging compliance, vulnerability remediation, and change management. Develop and integrate ML and AI tools into security systems while supporting ISSOs and maintaining application operations and security procedures.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, prioritizing vulnerabilities, and integrating security controls into CI/CD pipelines. The role partners with engineering teams, develops security automation, establishes application security metrics, supports AWS and cloud security, and drives timely remediation while documenting key processes.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, prioritizing vulnerability remediation, developing security automation, and establishing application security metrics and documentation across engineering teams.

Advances application security within a DevSecOps model by embedding controls into the SDLC, conducting SAST, DAST, SCA, threat modeling, and code reviews, integrating security tools into CI/CD pipelines, and managing vulnerability remediation. The role collaborates with software, cloud, and DevOps teams across AWS and Azure, supports security investigations and compliance initiatives, and enables developers through secure coding guidance and automation.

Embed security across the software development lifecycle through threat modeling, architecture reviews, code reviews, vulnerability management, security tooling, red-team exercises, runtime protections, secure authentication, cloud and container hardening, incident response, training, and technical documentation. Partner closely with engineering and infrastructure teams to reduce application risk and implement secure development patterns.

Provides application security engineering and sustainment throughout system lifecycles. Responsibilities include administering, configuring, tuning, monitoring, and securing applications; supporting ISSOs with ATO/ATT documentation; integrating AI and ML into security tools; conducting security impact assessments; managing configurations and changes; ensuring logging compliance; and supporting vulnerability management. Requires significant cybersecurity-related technical experience and a TS/SCI clearance.

The Application Security Engineer embeds security throughout the software development lifecycle, conducts secure code reviews, identifies vulnerabilities, integrates SAST, DAST, and SCA tooling into CI/CD pipelines, and partners with engineering teams on cloud security, authentication, authorization, and risk reduction. The role also involves security automation, offensive and defensive security practices, vulnerability management, and communicating security recommendations to technical and non-technical stakeholders.

Leads web application and network penetration testing, identifies and validates vulnerabilities, develops proof-of-concept exploits, supports remediation, and conducts security risk assessments. The role also develops custom testing tools, uses AI-enhanced scanners, validates AI-assisted findings, mentors engineers, and ensures security activities align with compliance, privacy, and ethical standards.

Leads web application and network penetration testing, develops proof-of-concept exploits, identifies and rates vulnerabilities, supports remediation, and conducts security risk assessments. Develops custom testing tools and techniques, uses AI-enhanced scanners, validates AI-assisted findings, and mentors cybersecurity engineers. Collaborates on incident investigations, compliance, and security technology implementation while ensuring ethical, privacy, and regulatory standards.

Lead web application and network penetration testing, identify and validate vulnerabilities, develop custom testing tools, support remediation, and conduct security risk assessments. Mentor engineers in offensive security techniques and evaluate AI-assisted security outputs for accuracy, compliance, privacy, and operational risks. Collaborate with cybersecurity teams on incident investigations, application security, and policy adherence.