About this role

Manage and optimize core application defenses, including the Web Application Firewall (WAF) and automated vulnerability scanning tools, while monitoring key security metrics.
Architect and maintain security gating processes within the CI/CD pipeline to ensure secure, seamless software delivery.
Govern and secure our growing AI pipeline within the SDLC by implementing input/output monitoring, context controls, and safety guardrails around AI-generated code.
Partner with development teams to remediate vulnerabilities, scale the security champions program, and co-lead our public bug bounty initiative.
Mentor junior engineers and analysts, and occasionally present security postures, trends, and program milestones to upper management.

Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
5 years of experience with managing Web Application Firewalls (WAF) and integrating automated security gating into CI/CD pipelines.
Experience with vulnerability management and cloud-hosted application security scanning tools.
Experience collaborating directly with software development teams on threat mitigation.
Experience with scripting or programming languages (i.e., Python, Java, Kotlin) to automate security processes.

Senior Application Security Engineer

Key skills