Senior Application Security Engineer

Unity Technologies SF; København; On-site; DKK 702,000 - 1,053,000; Full time

Benefits offered by this job

Health insurance

Commuter subsidy

Employee stock ownership

Retirement plans

Generous vacation and personal days

Parental leave support

Office snacks

Mental Health & Wellbeing programs

Employee Resource Groups

Training and development programs

Volunteering and donation matching

Job summary

Unity Technologies SF is seeking a Senior Application Security Engineer to lead threat modeling, secure design reviews, and code evaluation for Unity’s engine, editor, cloud services, and APIs. You will use AI-assisted tooling and work with US/EMEA teams to strengthen the secure development lifecycle.

The role requires 5+ years in application security, strong secure coding, and hands-on testing across languages, with cloud security experience and excellent cross-regional communication.

Qualifications

• 5+ years in application security on complex, large-scale systems.
• Strong secure coding practices and vulnerability awareness (OWASP).
• Hands-on secure development across several languages.
• Experience with SAST/DAST/SCA and manual testing.
• Proficient with cloud security in AWS/GCP/Azure.
• Clear technical communication with engineers and partners.

Responsibilities

• Lead threat modeling and secure design reviews for Unity products.
• Perform deep code reviews and manual testing on high-risk systems.
• Build and operate security automation and AI-assisted tooling.
• Secure Unity's AI and agentic systems and assess risks.
• Collaborate with engineering to drive remediation and guardrails.
• Investigate security incidents and contribute to lifecycle compliance.

Skills

AppSec experience

Secure coding

Penetration testing

Cloud security

Auth & cryptography

Security architecture

Technical communication

Tools

SAST

DAST

SCA

Job description

Senior Application Security Engineer

About the role

Unity builds the real-time 3D platform that powers games and interactive experiences, along with tools used across ads, automotive, aerospace, architecture, retail, energy, and government. Our Product Security team keeps that platform, and the software built on top of it, safe for millions of creators and their users.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do

• Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.
• Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.
• Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.
• Secure Unity's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.
• Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.
• Investigate and respond to application security incidents, including root cause analysis and durable corrective action.
• Contribute to Unity's secure development lifecycle and to compliance work.

What you bring: domain expertise

• 5+ years in application security, with a track record on complex, large-scale systems.
• Strong command of secure coding and common vulnerability classes (OWASP Top 10 and beyond)
• Hands-on secure development experience across several languages.
• Practical penetration testing, security assessment, and vulnerability management experience with standard tooling (SAST, DAST, SCA, and manual techniques).
• Experience with Cloud security (GCP, AWS, or Azure).
• Working knowledge of authentication, authorization, cryptography, and secure architecture patterns.
• Clear technical communication for both engineers and non-technical partners across regions.

Preferred Qualifications

• Experience in the technology, gaming industry or Ad tech.

Denmark: Base Salary Range: kr702,200 - kr1,053,400 DKK gross

Israel: Base Salary Range: ₪352,000 - ₪528,000 ILS gross

This range reflects the anticipated base salary for this position. Beyond base salary, this role may be eligible for equity awards and participation in our company incentive plans (such as annual discretionary bonuses or sales commissions). The final offer amount will depend on several factors, including geographic location and the candidate's relevant experience, professional background, and skill set.

Benefits

• Comprehensive health, life, and disability insurance
• Commute subsidy
• Employee stock ownership
• Competitive retirement/pension plans
• Generous vacation and personal days
• Support for new parents through leave and family-care programs
• Office food snacks
• Mental Health and Wellbeing programs and support
• Employee Resource Groups
• Global Employee Assistance Program
• Training and development programs
• Volunteering and donation matching program

Life at Unity

Unity [NYSE: U] is the world's leading game engine, powering play for more than 3 billion consumers each month. The top mobile games in the world, the most played PC indie titles, the most innovative console games, and virtually all of the top XR and Web Games are developed, deployed, and grown in Unity. Unity also enables teams across industries like automotive, manufacturing, and healthcare to design, simulate, and collaborate in 3D - closing the gap between ideas and reality. For more information, please visit www.unity.com .

Un