Senior App Security Engineer – Secure-by-Design

Optimum; Plano (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

Optimum, headquartered in Plano, TX, is seeking a Senior Product Security Engineer focused on applications. You will partner with engineering and product teams to embed security into the lifecycle, shape secure architecture, and drive secure-by-default practices across cloud and on-prem environments.

You will lead threat modeling, security testing, and automation efforts, while mentoring teams and staying abreast of evolving threats and industry best practices.

Qualifications

• 5+ years in software engineering and application security.
• Experience securing cloud-based and containerized environments.
• API, web, and mobile app security expertise.
• Ability to communicate security concepts to leadership.
• Experience with GCP and CI/CD pipelines.
• Knowledge of ISO, NIST, OWASP frameworks.

Responsibilities

• Integrate security guardrails into the product lifecycle.
• Perform threat modeling and risk assessments early in development.
• Conduct rigorous security testing and reviews.
• Lead automation of security processes across dev to cloud environments.
• Design, deploy, and support security-focused solutions.
• Mentor engineering teams on secure design and practices.
• Stay updated on threats and trends; implement improvements.
• Contribute to incident response and root cause analysis.

Skills

Security engineering

Threat modeling

Cloud security

API/web/mobile security

Communication to leadership

Secure SDLC

Programming languages

Education

Bachelor’s degree in CS/EE or related field

Master’s degree is a plus

Tools

GCP

Docker

Kubernetes

Terraform

GitLab

GitHub

SAST

DAST

SCA

Job description

Optimum, headquartered in Plano, TX, is seeking a Senior Product Security Engineer focused on applications. You will partner with engineering and product teams to embed security into the lifecycle, shape secure architecture, and drive secure-by-default practices across cloud and on-prem environments.

You will lead threat modeling, security testing, and automation efforts, while mentoring teams and staying abreast of evolving threats and industry best practices.