Remote Senior AppSec Engineer: Offensive Security & Cloud

Qualia; San Francisco (CA); On-site; USD 180,000 - 210,000; Full time

Benefits offered by this job

Comprehensive health plans

401k program

Flexible time off policy

Parental leave

Professional development opportunities

Job summary

Qualia is seeking a Senior Application Security Engineer to join their AppSec team in San Francisco. This remote role focuses on enhancing security across Qualia's products and cloud infrastructure, requiring expertise in offensive security and security tooling.

Your responsibilities include conducting penetration tests, leading threat assessments, and evolving security protocols. The ideal candidate will have 8+ years in application security with strong technical skills in cloud services and security automation.

Qualifications

• 8+ years of hands-on experience in application security, offensive security, or security engineering.
• Strong offensive skills for manual exploitation of real web and API vulnerabilities.
• Experience in building and operating security tooling in modern engineering organizations.

Responsibilities

• Run offensive assessments against Qualia's applications and infrastructure.
• Lead threat modeling and secure design review for high-risk initiatives.
• Evolve our AppSec tooling stack from end-to-end, including custom rules and automation.

Skills

Offensive testing

Security tooling/automation

Cloud/infra security

Manual penetration testing

CI/CD security gates

Education

8+ years in application security or related fields

Tools

AWS

Docker

Kubernetes/EKS

Terraform

Job description

Qualia is seeking a Senior Application Security Engineer to join their AppSec team in San Francisco. This remote role focuses on enhancing security across Qualia's products and cloud infrastructure, requiring expertise in offensive security and security tooling.

Your responsibilities include conducting penetration tests, leading threat assessments, and evolving security protocols. The ideal candidate will have 8+ years in application security with strong technical skills in cloud services and security automation.