Senior Application Security Engineer

IBM; Armonk (NY); On-site; USD 170,000 - 230,000; Full time

Job summary

IBM is seeking a Staff Application Security Engineer to drive security across Confluent on-prem and cloud services. You will shape security architecture, lead design reviews, and push secure-by-design practices across engineering, product, and leadership.

The role emphasizes automating security controls, advancing threat modeling, and safeguarding critical attack surfaces in distributed systems and cloud deployments.

Qualifications

• 10+ years of hands-on application security experience in large-scale distributed systems.
• Strong knowledge of secure software design and architecture.
• Experience with cloud-native platforms and secure CI/CD pipelines.
• Go, Python, or Java programming experience for security automation.

Responsibilities

• Define and evolve application security architecture across on-prem and cloud services.
• Lead security automation tooling and secure-by-design reviews.
• Perform security design reviews and oversee API security testing.
• Drive preventive security improvements through architecture and automation.
• Collaborate with Engineering, Product, and Leadership to embed security into lifecycle.

Job description

IBM is seeking a Staff Application Security Engineer to drive security across Confluent on-prem and cloud services. You will shape security architecture, lead design reviews, and push secure-by-design practices across engineering, product, and leadership.

The role emphasizes automating security controls, advancing threat modeling, and safeguarding critical attack surfaces in distributed systems and cloud deployments.