AppSec Architect: Threat Modeling & Design Reviews

SRM Technologies; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

Dropbox is seeking an experienced security engineer in Application Security to drive threat modeling and design reviews across the SDLC. You will collaborate with product and engineering teams to identify risks early and provide practical mitigations.

You will help develop tooling, documentation, and automation to scale security reviews and educate engineers through workshops and guidance. You'll also support incident investigations when issues arise.

Qualifications

• 5+ years of experience in Application Security, Product Security, or related field.

Responsibilities

• Participate in security design reviews and threat modeling exercises for new products, services, and platform capabilities.
• Partner with engineering teams to identify security risks and recommend practical mitigations during design and development.
• Serve as a security consultant for product and engineering teams, answering security questions and providing guidance on secure implementation patterns.
• Review architectures, designs, data flows, and deployment models to identify risks and recommend secure patterns.
• Collaborate with teams developing AI/ML features to identify emerging security risks and secure implementations.
• Help maintain and improve security standards, guidance, reference architectures, and internal documentation.
• Develop or enhance tooling and automation to improve threat modeling and security reviews.
• Collaborate on application security assessments and investigate concerns identified during development.
• Contribute to developer education through documentation, office hours, workshops, or security awareness initiatives.
• Support security incident investigations and root cause analysis when issues are discovered.

Skills

Threat modeling

Application security

Security reviews

Cloud platforms

Technical writing

Automation scripts

Tools

AWS

Job description

Dropbox is seeking an experienced security engineer in Application Security to drive threat modeling and design reviews across the SDLC. You will collaborate with product and engineering teams to identify risks early and provide practical mitigations.

You will help develop tooling, documentation, and automation to scale security reviews and educate engineers through workshops and guidance. You'll also support incident investigations when issues arise.