Application Security Engineer - Secure SDLC & Supply Chain

Saronic Technologies; San Diego (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Saronic Technologies, a leader in autonomy at sea, is seeking a Security Engineer for Application Security to empower teams to ship fast without compromising the security of the software development lifecycle and supply chain across product, cloud, and enterprise systems.

You’ll collaborate with Software, DevOps, Cloud, and Platform Engineering to make secure the default and to build guardrails and paved roads that let teams deploy securely by default.

Qualifications

• 5+ years in application security, DevSecOps, or product security.
• Hands-on secure SDLC: threat modeling, secure code review, and SAST/DAST/SCA in CI/CD.
• Software supply-chain security and secrets management.
• Experience securing deployment and self-hosting of applications (hardened images, isolation, patching, monitoring).
• Comfortable with scripting and Infrastructure-as-Code.
• Ability to obtain and maintain a U.S. security clearance.

Responsibilities

• Secure SDLC & DevSecOps: threat modeling and secure design and code reviews; integrate SAST, DAST, and SCA into CI/CD with guardrails.
• Software Supply Chain: own dependency and supply-chain security, SBOMs, artifact signing, provenance, and reducing exposure.
• Secrets & Application Controls: govern secrets management and data-loss-prevention controls.
• Secure Self-Hosting Infrastructure: design and harden infrastructure for self-hosted apps across AWS, Azure, and on-prem.
• Partnership: collaborate with engineering teams to scale security across the org.

Skills

Application security

Threat modeling

Secure code reviews

CI/CD security

Scripting / IaC

U.S. security clearance (ability to)

Tools

SAST tools

DAST tools

SBOM tooling

Job description

Saronic Technologies, a leader in autonomy at sea, is seeking a Security Engineer for Application Security to empower teams to ship fast without compromising the security of the software development lifecycle and supply chain across product, cloud, and enterprise systems.

You’ll collaborate with Software, DevOps, Cloud, and Platform Engineering to make secure the default and to build guardrails and paved roads that let teams deploy securely by default.