Top Application Security Engineer Jobs

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead technical contributor on Identity and Access Management teams building secure, scalable applications. Designs and develops production code, drives automation and CI/CD, enforces authentication/authorization/encryption, adopts AI-assisted engineering practices, evaluates vendors, and promotes secure coding, resiliency, and operational stability across teams.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The Application Security Engineer will identify security gaps, build tooling, conduct code reviews, and drive vulnerability remediation, ensuring secure product delivery.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

The Application Security Engineer integrates security into software development, establishing secure coding practices and protecting applications across various platforms and systems.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

The Application Security Engineer integrates security into software development by establishing secure coding practices and collaborating on secure application architecture across various platforms.

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead application security efforts across product and platform teams by performing security assessments, vulnerability testing, code reviews, threat modeling, and CI/CD integration. Collaborate with SRE, development, IT, and risk teams to remediate vulnerabilities, implement secure coding practices, provide training, and drive security process improvements. Mentor engineers and stay current on threat techniques and protective controls.

Lead application security by performing risk analyses, vulnerability assessments, SAST/DAST and SCA testing, secure design and code review, threat simulations, cloud and WAF hardening, CI/CD security integration, and reporting to senior management while coordinating remediation with development and IT teams.

Work directly with engineering to identify systemic application security gaps, build SAST/SCA tooling and custom static analysis, perform secure code and design reviews, threat model new features (including agentic AI/LLM systems), and present security posture to enterprise healthcare customers.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Perform automated and manual application security analysis (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers with remediation and secure design, conduct threat modeling, document findings, and stay current on vulnerabilities and mitigation strategies.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead threat modeling, secure design reviews, penetration testing and deep code review for Unity products. Build and operate security automation and AI-assisted tooling, secure AI/LLM integrations and agentic systems, drive remediation with engineering teams, investigate AppSec incidents, and contribute to the secure development lifecycle and compliance.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Lead application security across product, pipeline, and customer environments by partnering with engineering to integrate secure design, conduct threat modeling and risk assessments, manage code and supply-chain security (SAST/DAST), triage bug bounty findings, harden Kubernetes and multi-tenant architectures, and participate in on-call rotation.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.