Application Security Engineer – Cloud, AI & Trust

Sonar; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

23 days PTO per year

401(k) with 4% match

Fully paid parking in downtown Austin

Global team across 20+ countries

Monthly team events

Job summary

Sonar, based in Austin, TX, is seeking an Information Security professional to champion security by design across products and cloud platforms. You will partner with product, platform, and infrastructure teams to ensure architectures meet Sonar’s high security bar while aligning with ongoing risk reduction and customer trust initiatives.

The role covers security assurance, threat monitoring, and incident readiness, with on-call responsibilities and a focus on scalable, automated processes for

Qualifications

• Extensive experience with AWS-based architectures and cloud security patterns.
• Experience conducting application security assessments including code review and auth design.
• Experience assessing AI and agentic AI capabilities and defining best practices.
• Experience applying threat-modeling approaches (e.g., STRIDE) to improve design discussions.

Responsibilities

• Shape secure products and cloud architectures with product and engineering teams.
• Lead security assurance initiatives and deploy modern tools across the org.
• Investigate, triage, and remediate security findings; translate into durable fixes.
• Lead incident investigations and improve detection, response, and customer trust.

Skills

AWS

Threat modeling

Penetration testing

Incident response

Security architecture

AI security

Tools

Azure

GCP

Job description

Sonar, based in Austin, TX, is seeking an Information Security professional to champion security by design across products and cloud platforms. You will partner with product, platform, and infrastructure teams to ensure architectures meet Sonar’s high security bar while aligning with ongoing risk reduction and customer trust initiatives.

The role covers security assurance, threat monitoring, and incident readiness, with on-call responsibilities and a focus on scalable, automated processes for