Senior App Security Engineer — Remote (Utah)

Canopytax; Draper (UT); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k)

Paid time off

EAP

Company events

Job summary

Canopy is hiring a Senior Application Security Engineer to harden our platform and secure our software supply chain. You will own cross-cutting security areas across cloud infrastructure, identity, network and applications, collaborating with platform and product teams.

You will push for zero-trust, secure SDLC practices, and leverage AI-enabled security tooling to strengthen our defenses in a fast-moving SaaS environment in Utah.

Qualifications

• 8+ years in application security or related field.
• Hands-on in cloud security, IAM, and container security.
• Experience with AI-enabled security considerations.

Responsibilities

• Design and drive multi-year security roadmap for cloud, identity, network, application, observability and software supply chain.
• Harden AWS and Kubernetes environments, including IAM, workload identity, and zero-trust access.
• Strengthen authentication and application-layer defenses (anti-abuse, headers, multi-tenant isolation).
• Build security observability stack: logging, posture monitoring, runtime threat detection, deception techniques.
• Embed security into the SDLC with CI/CD gates, secret scanning, SBOMs, artifact signing.
• Evaluate AI-powered security tools for pentesting, code review and anomaly detection.
• Collaborate with security lead and engineering teams to prioritize work and balance load.
• Advise engineering on secure design patterns and security literacy across the org.

Skills

AWS security

Kubernetes security

Web app security

Security observability

Zero-trust

Threat modeling

Security tooling

Tools

AWS

Kubernetes

Tailscale

Artifact signing

Job description

Canopy is hiring a Senior Application Security Engineer to harden our platform and secure our software supply chain. You will own cross-cutting security areas across cloud infrastructure, identity, network and applications, collaborating with platform and product teams.

You will push for zero-trust, secure SDLC practices, and leverage AI-enabled security tooling to strengthen our defenses in a fast-moving SaaS environment in Utah.