Top Application Security Engineer Jobs

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

The Application Security Engineer integrates security into software development, establishing secure coding practices and protecting applications across various platforms and systems.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

The Application Security Engineer integrates security into software development by establishing secure coding practices and collaborating on secure application architecture across various platforms.

Maintain application security for business-critical systems by identifying, prioritizing, and remediating vulnerabilities throughout the software development lifecycle. Lead security discussions, advise development teams on secure practices and controls, and perform SAST, DAST, threat modeling, and application security assessments. Use Veracode and Burp Suite, apply OWASP standards, support security pipeline integration, and address emerging threats while meeting federal security and compliance requirements.

Secure the software development lifecycle by configuring application security tooling, leading API, container, and application testing, conducting threat modeling and architecture reviews, and supporting vulnerability management. Develop secure-by-design standards, AI security controls, automation, metrics, documentation, and training. Partner with engineering, cloud, and product teams to improve security coverage, developer experience, and remediation across cloud-native applications.

The Application Security Engineer embeds security throughout the software development lifecycle, partners with engineering teams on secure system design, performs code reviews and vulnerability assessments, and integrates SAST, DAST, SCA, and security tooling into CI/CD pipelines. The role requires cloud security expertise, knowledge of authentication, authorization, cryptography, and OWASP vulnerabilities, plus programming and automation skills. Preferred experience includes offensive security, red-team operations, bug bounties, CVEs, AI/LLM security, and regulated industries.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Advances application security within a DevSecOps model by embedding controls into the SDLC, conducting SAST, DAST, SCA, threat modeling, and code reviews, integrating security tools into CI/CD pipelines, and managing vulnerability remediation. The role collaborates with software, cloud, and DevOps teams across AWS and Azure, supports security investigations and compliance initiatives, and enables developers through secure coding guidance and automation.

Conduct application security assessments across web, API, and mobile systems; perform SAST, DAST, SCA, manual reviews, threat modeling, and vendor security assessments. Prioritize vulnerabilities, guide developers on remediation and secure coding, integrate automated scanning into CI/CD pipelines, and maintain application security standards, documentation, and training.

Designs, implements, and administers F5 BIG-IP solutions within DoD cloud and on-premises environments. Supports enterprise architecture modernization, troubleshoots issues with DoD clients and stakeholders, and applies cryptography, PKI, TLS, mTLS, and federal compliance standards. The role supports national security missions and requires Secret clearance.

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.

Leads Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Responsibilities include setting technical strategy, reducing remediation time, developing automation, guiding engineering teams, mentoring security engineers, assessing high-profile vulnerabilities, supporting incident investigations, and participating in on-call response. The role requires extensive security experience, programming proficiency, AWS expertise, vulnerability management knowledge, and practical use of AI/LLM tooling.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Own and mature the application security program, including secure development practices, tooling, automation, vulnerability management, and detection pipelines. Partner with engineering on secure AI-driven workflows, data privacy, and AI-specific vulnerabilities. Lead incident response as primary incident commander, support cloud security, and guide security audits, certifications, and customer requirements in a regulated fintech environment.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Partner with product, platform, and infrastructure teams to embed security into products and AWS cloud architecture. Conduct application security assessments, code reviews, threat modeling, penetration tests, red-team exercises, and vulnerability remediation. Assess AI and agentic AI capabilities, investigate security findings and customer concerns, support incident response, monitor threat intelligence, and automate security processes. Occasional on-call participation may be required.