Remote Application Security Engineer – AI-First

Camunda; United States; Remote; USD 120,000 - 193,000; Full time

Benefits offered by this job

Remote & Flexible

In Person Connection

Health & Wellbeing

Job summary

Camunda, an AI-first enterprise platform, is hiring an Information Security Engineer focused on Application Security. Join a security‑minded team working with R&D to review designs, model threats, examine code, and build scalable internal tooling.

You’ll contribute to CVE registries, AI-assisted workflows, and secure-by-default guidance across engineering. You’ll spend time with engineers, participate in on‑call rotation, and support customer security inquiries and audits, while growing in a

Qualifications

• 3+ years in security or software engineering, with at least 2 in AppSec or product security.
• Experience at a SaaS or software product company.
• Hands-on vulnerability triage with tools like Snyk, Trivy, Semgrep, CodeQL.
• Threat modeling and design review experience (e.g., STRIDE) on real systems.
• Ability to read/write code and follow data flows in Java; scripts/tools contribution.
• Experience using AI coding agents and ensuring second-look reviews for security.

Responsibilities

• Triage findings from SCA, container and code scanning and external reports.
• Run threat modeling sessions and design reviews with R&D teams.
• Use LLM-assisted tooling to review code, validate findings and reproduce issues.
• Build internal security tooling and CVE registry automation.
• Help engineers adopt secure defaults; review PRs and run workshops.
• Participate in on-call rotation and incident response.
• Draft security advisories for customers and support audits.

Skills

Security

SaaS

Vulnerability triage

Threat modeling

Code reading/writing

AI tooling

Clear communication

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

Camunda, an AI-first enterprise platform, is hiring an Information Security Engineer focused on Application Security. Join a security‑minded team working with R&D to review designs, model threats, examine code, and build scalable internal tooling.

You’ll contribute to CVE registries, AI-assisted workflows, and secure-by-default guidance across engineering. You’ll spend time with engineers, participate in on‑call rotation, and support customer security inquiries and audits, while growing in a