Application Security Engineer

Omnissa, LLC in; Atlanta (GA); Hybrid; USD 112,000 - 186,000; Full time

Benefits offered by this job

Employee ownership

Health insurance

401k with matching

Job summary

Omnissa is seeking a hands-on Application Security Engineer to own secure code reviews and vulnerability triage across multiple product families. You will read and review production code, identify vulnerabilities, and work with engineers to remediate issues, driving security improvements across the portfolio.

You will lead efforts in threat modeling and develop automation to streamline security workflows. This role reports to the Director of Product Security and collaborates with security

Qualifications

• 4+ years in application security or software engineering with security focus.
• Hands-on experience with manual secure code review and application security testing.
• Proficiency in Java or C++, and ability to read production code.
• Automation scripting experience preferred.

Responsibilities

• Lead threat modeling for features and components, and partner with senior engineers on cross-cutting architectures.
• Independently perform secure code reviews, manual application security testing, and penetration testing across components.
• Triage and validate reported vulnerabilities, assess severity, and drive fixes with engineering teams.
• Build and maintain automation and tooling that improve the security process.
• Document findings and guidance clearly, collaborating with developers to strengthen secure development practices.

Skills

Application security

Secure code review

Threat modeling

Penetration testing

Automation tooling

Documentation

Education

Bachelor’s degree in CS

Tools

SAST/DAST

Job description

Job Description: We are Omnissa! Omnissa is the first AI-driven digital work platform, built to support flexible, secure, work-from anywhere experiences. We integrate industry-leading solutions—including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance—into a seamless, autonomous workspace that adapts to how people work. Our platform boosts employee engagement while optimizing IT operations, security, and cost. Guided by our Core Values—Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value—we’re growing rapidly and committed to delivering meaningful impact. If you're passionate about shaping the future of work, we’d love to hear from you. At Omnissa, we are committed to maintaining a fair, consistent, and secure hiring process for all candidates. As part of this approach, we use standard interview and verification practices designed to ensure alignment and protect both candidates and the organization. These practices are applied thoughtfully and with respect for candidate privacy.

What is the opportunity?

This is a hands-on application security role for an engineer who can own well-scoped work and deliver it independently. You’ll contribute across multiple areas of the security program — from secure code reviews and application security testing to triaging vulnerabilities and building automation — collaborating with senior and staff engineers on the harder, more ambiguous problems. Omnissa’s portfolio spans six major product families and roughly a hundred products, so you’ll focus on assigned areas while steadily broadening your expertise and growing your scope and impact over time. This role is about the security of the code we write — reading it, reviewing it, and helping engineers find, fix, and prevent vulnerabilities in our own software — not CVE tracking, dependency patching, or third-party vulnerability management. It is deep, manual work: reasoning about source code to find issues that automated scanners miss, not operating SAST/DAST tools and forwarding their output. If you have an analytical mind, a passion for software security, and thrive on solving problems, this role is for you. A successful candidate is dependable, communicates clearly, manages their time well, and can identify and understand root causes.

Key Responsibilities:

• Lead threat modeling for the features and components in your area, and partner with senior engineers on threat models spanning complex or cross-cutting architectures.
• Independently perform secure code reviews, manual application security testing, and penetration testing across assigned components, partnering with senior engineers on complex or distributed architectures.
• Triage and validate reported vulnerabilities in our products, assess severity and impact, and drive fixes to closure with engineering teams.
• Build and maintain automation and tooling that improve the security process.
• Identify recurring issues in your areas and recommend improvements to tooling or process.
• Document findings and guidance clearly, and collaborate with developers to strengthen secure development practices across the portfolio.

What success looks like:

First 3 months: Ramp up on the products in your assigned area — their architecture, development toolchain, and release process — within Omnissa’s broader portfolio of six product families, and begin delivering security reviews and triage. First 6 months: Independently own routine security work end to end, handle vulnerability triage with sound judgment, and contribute automation or process improvements that help the team. 12 months: Reliably own a defined area with minimal oversight, take on progressively more complex problems, and be a consistent, trusted contributor to the security program.

Leadership and team culture:

Report to the Director of Product Security and take direction from the Manager of Application Security. Work closely with a committed team of security engineers, product managers, and developers focused on innovation and getting things done. Build trust among team members and stakeholders, committing to customer success. Operate in a transparent, communicative environment that emphasizes work-life balance and having fun at work.

What will you bring to Omnissa?

Required: 4+ years of experience in application security, or in software engineering with a demonstrated focus on security. Solid working knowledge of common application security vulnerabilities and mitigation techniques. Hands-on experience with manual secure code review and application security testing — reading source code to find vulnerabilities, not just running and triaging scanner output. Candidates whose experience is primarily operating SAST/DAST scanners are not a fit. Proficiency in a programming language such as Java or C++, with the ability to read and reason about production code. Ability to own well-scoped security work independently and deliver it reliably. Strong problem-solving skills and attention to detail. Good documentation and communication skills, and the ability to collaborate within a team.

Preferred: Exposure to security across multiple domains — application, system, cloud, or mobile. Experience writing automation or scripts to improve a technical process. Familiarity with AI tooling and interest in testing agentic AI systems. Prior experience in the software industry or multi-tenant SaaS.

Location:

Atlanta, Mountain View

Location Type:

HYBRID – 3 days per week in our Atlanta office; remaining days remote. Candidates must reside within a reasonable commuting distance.

Travel Expectations:

Occasional (annual) travel to remote offices

Education:

Bachelor’s degree in Computer Science or a related field preferred, or equivalent combination of education and relevant professional experience.

Compensation:

The typical base salary for this role is between USD $111,637– $186,062 per year and it may be eligible for participation in a corporate bonus program. Actual compensation offer may vary from posted hiring range based upon geographic location, work experience, education, skill level, or other relevant factors.

Benefits:

In addition to competitive compensation, Omnissa offers a variety of benefits such as employee ownership, health insurance, 401k with matching contributions, disability insurance, paid-time off, growth opportunities, and more.

Equal Employment Opportunity

Omnissa is an Equal Employment Opportunity company and Prohibits Discrimination and Harassment of Any Kind: Omnissa is committed to the principle of equal employment opportunity and to providing a work environment free of discrimination and harassment. All employment decisions at Omnissa are based on business needs, job requirements and individual qualifications, without regard to race, color, religion, ancestry, ethnicity, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past, present, or prospective service in the uniformed services, family medical history or genetic information, family or parental status, veteran status, or any other status protected by applicable laws or regulations in the locations where we operate. Omnissa will not tolerate discrimination or harassment based on any of these characteristics. Omnissa welcomes applicants of all ages. Omnissa will provide reasonable accommodations to applicants and employees who have protected disabilities consistent with applicable federal, state and local law. This job requisition is not eligible for employment-based immigration sponsorship by Omnissa.

About Omnissa

Omnissa is the digital work platform leader, trusted by thousands of organizations worldwide as the former VMware End-User Computing business. We make digital work, work – for businesses and their people. No painful IT processes or productivity trade-offs. Instead, a seamlessly delivered digital employee experience that simplifies work. Our comprehensive digital work platform enables IT teams to provide secure, personalized experiences for every employee, on any device. Omnissa unifies, automates, and efficiently scales the digital workspace. By empowering employees to do their best work, anywhere, we help workforces everywhere unlock exponential business value. All is made possible with the Omnissa™ Platform, the first AI-driven digital work platform for smart, seamless, and secure work experiences from anywhere. It integrates multiple industry-leading solutions across Unified Endpoint Management, Virtual Desktops and Apps, Digital Employee Experience, and Security and Compliance. By continuously adapting to users’ work styles, Omnissa optimizes user experience, security, IT operations and costs. Recognized as 2025 Digital Workplace Company of the Year 2025 InfoWorld Awards Finalist – App Volumes RemoteTech Breakthrough Award Winner – Digital Workplace Company of the Year CRN Product of the Year Finalist – Omnissa Horizon (DaaS) Omnissa is committed to building a workforce that reflects the communities we serve across the globe. We believe this brings unique perspectives, experiences, and ideas, which are essential for driving innovation and achieving business success. We hire based on merit and with equal opportunity for all.