Application Security Engineer — Secure SDLC & Cloud Apps

CrowdStrike Holdings, Inc.; California (MO); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Equity awards

Wellness programs

Paid time off

Professional development

Job summary

CrowdStrike is seeking an Application Security Engineer to secure our applications and help harden internal systems. You will dig into web applications, identify design and implementation flaws, and guide product engineers to ship secure code.

You’ll hunt for security defects, perform cross-cutting projects, and contribute across teams to strengthen security throughout the development lifecycle. Experience with DevSecOps, cloud apps, and security tooling is valued.

Qualifications

• Experience with threat modeling and secure SDLC practices.
• Code review experience for modern web apps (Go/Python/Java).
• Familiarity with cloud-native apps and cloud security best practices.

Responsibilities

• Join engineering teams as a security advisor, influencing product design.
• Create threat models to minimize threat surface.
• Review application code for security defects and risks.
• Attack applications across the SDLC to find and fix defects.
• Collaborate with developers to remediate defects and weaknesses.
• Develop automation to streamline security tasks and integrations.
• Support bug bounty programs and improve application security.

Skills

Threat modeling (STRIDE)

Code review (Go/Python/Java)

Cloud security (GCP/AWS/Azure)

AppSec tools (SAST/DAST/CSPM/DSPM/ASPM

Application penetration testing

Cross-team collaboration

AI-enabled security

Education

Technical security certifications or degree

Tools

Docker

Kubernetes

Job description

CrowdStrike is seeking an Application Security Engineer to secure our applications and help harden internal systems. You will dig into web applications, identify design and implementation flaws, and guide product engineers to ship secure code.

You’ll hunt for security defects, perform cross-cutting projects, and contribute across teams to strengthen security throughout the development lifecycle. Experience with DevSecOps, cloud apps, and security tooling is valued.