Application Security Engineer: Threat Modeling Expert

United States Digital Space LLC; Warsaw (IN); Hybrid; USD 93,910 - 106,716; Full time

Benefits offered by this job

Health insurance

Dental coverage

Travel coverage

MacBook with accessories

Office catering

Job summary

United States Digital Space LLC is seeking an Application Security Engineer to join our Warsaw-based Security team. You will partner with IT, infrastructure, and product teams to design and ship secure software, performing security design reviews, threat modeling, and vulnerability assessments across products and internal applications.

You’ll guide remediation efforts, influence roadmaps, and deliver training on secure coding practices, threat modeling, and emerging threats, ensuring a

Qualifications

• 5+ years of experience in application security, product security, or software engineering with a security focus.
• Strong software engineering background with hands-on security design reviews and threat modeling.

Responsibilities

• Perform security design reviews and threat modeling for new features and services.
• Conduct vulnerability assessments of software and systems using various methodologies.
• Triage, investigate, and drive remediation of vulnerabilities from bug bounty programs and tooling.
• Influence engineering decisions by communicating security constraints and trade-offs.
• Investigate product security incidents using logs and monitoring tools.

Skills

Python

JavaScript/TypeScript

Scala

Threat modeling

Security design reviews

Vulnerability assessments

Tools

SAST/DAST tools

SCA

Job description

United States Digital Space LLC is seeking an Application Security Engineer to join our Warsaw-based Security team. You will partner with IT, infrastructure, and product teams to design and ship secure software, performing security design reviews, threat modeling, and vulnerability assessments across products and internal applications.

You’ll guide remediation efforts, influence roadmaps, and deliver training on secure coding practices, threat modeling, and emerging threats, ensuring a