Application Security Engineer: Threat Modeling & Secure SDLC

CrowdStrike; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Market-leading compensation

Wellness programs

PTO & holidays

Parental leave

Professional development

Diversity networks

On-site amenities

Job summary

CrowdStrike, a global leader in cybersecurity, is seeking an Application Security Engineer to protect our products from the latest threats. You will dig into web apps, identify design and implementation flaws, and partner with product engineers to ship secure code.

You’ll influence SDLC, build threat models, review code in Go/Python/Java, and drive automation with AI to improve efficiency. A strong security mindset and collaboration across teams are essential.

Qualifications

• Understanding of Agile/DevOps environments.
• Moderate experience with threat modeling using STRIDE.
• Code review experience for Go, Python, or Java.
• Knowledge of secure configuration of cloud-native and containerized apps in one or more Cloud environments (GCP, Azure, AWS).
• Experience using and/or maintaining AppSec tools like SAST, DAST, CSPM, DSPM, and ASPM suites.
• Understanding of common software weaknesses beyond OWASP Top 10 and app penetration testing.
• Collaborating across technical teams to drive decisions and context.
• Experience driving ambiguous research projects.
• Proven experience using AI technologies to improve decision-making and efficiency.

Responsibilities

• Join engineering teams as a security expert and advisor, influencing design and capabilities of our products.
• Create and maintain threat models to drive security decisions and minimize threat surface area.
• Review application source code, looking for security defects and risk.
• Attack applications throughout the Secure Development LifeCycle.
• Work with developers to understand defects, risks, design weaknesses, and implement solutions.
• Build integrated tools and automation to aid the team and engineering partners.
• Assist in responding to our bug bounty program and improve security of our applications.

Skills

Threat modeling

Code review

Go Python Java

Cloud security

AppSec tools

OWASP knowledge

Cross-team collaboration

AI in security

Adversarial research

Tools

Docker

Kubernetes

AWS

GCP

Azure

Job description

CrowdStrike, a global leader in cybersecurity, is seeking an Application Security Engineer to protect our products from the latest threats. You will dig into web apps, identify design and implementation flaws, and partner with product engineers to ship secure code.

You’ll influence SDLC, build threat models, review code in Go/Python/Java, and drive automation with AI to improve efficiency. A strong security mindset and collaboration across teams are essential.