Top Application Security Engineer Jobs

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Lead application security efforts across product and platform teams by performing security assessments, vulnerability testing, code reviews, threat modeling, and CI/CD integration. Collaborate with SRE, development, IT, and risk teams to remediate vulnerabilities, implement secure coding practices, provide training, and drive security process improvements. Mentor engineers and stay current on threat techniques and protective controls.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Lead application security efforts: perform automated and manual analyses (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers on secure design and remediation, lead threat modeling and documentation. Work on mission-critical DoD software; must be U.S. citizen and able to obtain DoD Secret clearance.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead threat modeling, secure design reviews, penetration testing and deep code review for Unity products. Build and operate security automation and AI-assisted tooling, secure AI/LLM integrations and agentic systems, drive remediation with engineering teams, investigate AppSec incidents, and contribute to the secure development lifecycle and compliance.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Lead application security engineer responsible for designing and implementing Zero Trust application and network security across enterprise/DoD environments. Develop and troubleshoot network infrastructure, integrate security controls (firewalls, application delivery, micro-segmentation), improve reliability and availability, lead cross-functional teams, and ensure compliance with DoD/ federal security requirements. Requires Secret clearance.

Lead application security for an AI-native enterprise coaching platform: review code and architecture, threat model, perform manual pentests, build security tooling, advise DevOps on infrastructure security, support incident response and SOC processes, and handle client-facing security needs.

Lead application and product security across web, mobile, API, AI/CV, and cloud-native systems. Drive secure SDLC, DevSecOps, CI/CD and supply chain security, threat modeling, tooling/automation, vulnerability remediation, and developer enablement while partnering closely with engineering teams.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Serve as a technical AppSec expert to identify, validate, and reduce application security risk via SAST/DAST/SCA and manual testing, threat modeling, secure design reviews, CI/CD tool integration, remediation validation, and security enablement across development teams.

Support and improve application security by implementing and operating SAST/DAST, API and container security solutions; triage and resolve security issues; collaborate with dev and product teams; participate in on-call rotation; drive projects to completion and integrate security into DevSecOps practices.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.