Top Application Security Engineer Jobs

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

The Application Security Engineer integrates security into software development, establishing secure coding practices and protecting applications across various platforms and systems.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

The Application Security Engineer integrates security into software development by establishing secure coding practices and collaborating on secure application architecture across various platforms.

Maintain application security for business-critical systems by identifying, prioritizing, and remediating vulnerabilities throughout the software development lifecycle. Lead security discussions, advise development teams on secure practices and controls, and perform SAST, DAST, threat modeling, and application security assessments. Use Veracode and Burp Suite, apply OWASP standards, support security pipeline integration, and address emerging threats while meeting federal security and compliance requirements.

Secure the software development lifecycle by configuring application security tooling, leading API, container, and application testing, conducting threat modeling and architecture reviews, and supporting vulnerability management. Develop secure-by-design standards, AI security controls, automation, metrics, documentation, and training. Partner with engineering, cloud, and product teams to improve security coverage, developer experience, and remediation across cloud-native applications.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Conduct application security assessments across web, API, and mobile systems; perform SAST, DAST, SCA, manual reviews, threat modeling, and vendor security assessments. Prioritize vulnerabilities, guide developers on remediation and secure coding, integrate automated scanning into CI/CD pipelines, and maintain application security standards, documentation, and training.

Designs, implements, and administers F5 BIG-IP solutions within DoD cloud and on-premises environments. Supports enterprise architecture modernization, troubleshoots issues with DoD clients and stakeholders, and applies cryptography, PKI, TLS, mTLS, and federal compliance standards. The role supports national security missions and requires Secret clearance.

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.

Leads Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Responsibilities include setting technical strategy, reducing remediation time, developing automation, guiding engineering teams, mentoring security engineers, assessing high-profile vulnerabilities, supporting incident investigations, and participating in on-call response. The role requires extensive security experience, programming proficiency, AWS expertise, vulnerability management knowledge, and practical use of AI/LLM tooling.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Own and mature the application security program, including secure development practices, tooling, automation, vulnerability management, and detection pipelines. Partner with engineering on secure AI-driven workflows, data privacy, and AI-specific vulnerabilities. Lead incident response as primary incident commander, support cloud security, and guide security audits, certifications, and customer requirements in a regulated fintech environment.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Partner with product, platform, and infrastructure teams to embed security into products and AWS cloud architecture. Conduct application security assessments, code reviews, threat modeling, penetration tests, red-team exercises, and vulnerability remediation. Assess AI and agentic AI capabilities, investigate security findings and customer concerns, support incident response, monitor threat intelligence, and automate security processes. Occasional on-call participation may be required.

Conduct web application security assessments, vulnerability testing, and remediation validation for company and customer-facing applications. Manage application security assets, analyze vulnerabilities, distinguish false positives, and track findings through resolution. Provide secure coding guidance and developer training, prepare assessment documentation, and collaborate with development, infrastructure, security, business, and customer teams to improve application security.

Leads application security engineering across web, API, mobile, cloud-native, container, and CI/CD environments. Designs automated security testing and vulnerability-management workflows, performs threat modeling and manual assessments, validates exploitability, and provides remediation guidance. Partners with engineering and cloud teams to embed secure development practices, applies AI-assisted vulnerability analysis, supports cybersecurity incidents, mentors engineers, and drives application security strategy.

Implements and operates application security controls, scanners, governance processes, and cloud infrastructure for global digital brands. Develops APIs, scripts, Kubernetes clusters, and infrastructure-as-code automation; conducts application security reviews, threat modeling, adversarial testing, and vulnerability assessments. Partners with development and operations teams to communicate findings, guide remediation, and promote secure software development practices across cloud-native environments.

Implements and operates application security controls, scanners, governance processes, and cloud infrastructure. Automates security reporting and controls through scripts and APIs, maintains Kubernetes environments, conducts threat modeling and adversarial testing, reviews applications and releases, and guides development teams in remediating vulnerabilities and following software security best practices.

Implements and maintains application security controls, tools, governance processes, and cloud infrastructure for global digital operations. The role assesses vulnerabilities, conducts security reviews, threat modeling, and adversarial testing, and supports remediation with development teams. It also develops APIs, scripts, automation, CI/CD integrations, and Kubernetes-based infrastructure using infrastructure as code. The engineer guides teams on software security best practices and operates security services supporting enterprise production workloads.