Remote AppSec Engineer - Threat Modeling & Secure CI/CD

Camunda; Atlanta (GA); Remote; USD 120,000 - 193,000; Full time

Benefits offered by this job

Remote work

Health benefits

Learning budget

Global collaboration

Job summary

Camunda is seeking an Information Security Engineer focused on Application Security to join our Security team. We embrace transparency and practical security, aiming to secure our platform and customers without creating friction.

You will work on vulnerability triage, threat modeling, code analysis with AI tools, and contribute to internal security tooling and incident response. You will collaborate with R&D and engineering teams, review pull requests, and help communicate risk clearly to

Qualifications

• 3+ years in security or software engineering with 2+ years AppSec/security-focused
• Experience at a SaaS or software product company
• Hands-on vulnerability triage with tools like Snyk, Trivy, Semgrep, CodeQL
• Threat modeling/design review experience (STRIDE) on real systems
• Read/write code (Java) and script tools; contribute to codebase
• Experience using AI coding assistants and validating their outputs
• Clear, friendly communication explaining risk to non-security staff

Responsibilities

• Triage findings from SCA, container and code scanning and external reports
• Run threat modeling sessions and design reviews with R&D teams
• Use AI-assisted tooling to review code and reproduce issues
• Build internal security tooling and CVE-related automation
• Assist engineers by answering questions and reviewing PRs
• Participate in on-call rotation and incident response
• Prepare security advisories and respond to customer security inquiries

Skills

Security engineering

AppSec

SaaS security

Vulnerability triage

Threat modeling

Code analysis

AI tooling

Communication

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

Camunda is seeking an Information Security Engineer focused on Application Security to join our Security team. We embrace transparency and practical security, aiming to secure our platform and customers without creating friction.

You will work on vulnerability triage, threat modeling, code analysis with AI tools, and contribute to internal security tooling and incident response. You will collaborate with R&D and engineering teams, review pull requests, and help communicate risk clearly to