Senior Application Security Engineer

Unity Enterprise; Town of Texas, Northern (WI, KY); On-site; USD 190,000 - 270,000; Full time

Benefits offered by this job

Health insurance

Employee stock ownership

Generous vacation days

Parental leave

Job summary

Unity, the real-time 3D platform leader, is hiring a Senior Application Security Engineer to drive threat modeling, secure design reviews, and rigorous code evaluation across engine, editor, cloud services, and APIs. You will apply manual testing and AI-assisted tooling, working with teams across the US and EMEA to harden products and internal platforms.

You will lead remediation, build secure defaults, and advance Unity's secure development lifecycle, focusing on AI-native products, agent

Qualifications

• Experience in application security for large-scale systems
• Strong knowledge of secure coding practices and OWASP Top 10
• Hands-on pentesting, security assessments, and vulnerability management
• Experience with cloud security and secure architecture patterns

Responsibilities

• Lead threat modeling, secure design reviews, and pen-testing for Unity products and services
• Perform deep code review and manual testing across engines, editors, and cloud platforms
• Build and operate security automation and AI-assisted tooling for continuous review and testing
• Secure Unity's AI and agentic systems and assess risks in AI-native products
• Partner with engineering teams to drive remediation and secure defaults
• Investigate security incidents and perform root cause analysis and durable fixes

Skills

Application security

Threat modeling

Penetration testing

Secure coding

Cloud security

Security tooling

Tools

Burp Suite

OWASP ZAP

AWS/GCP/Azure

Job description

Senior Application Security EngineerSkip to main content#Senior Application Security Engineer page is loaded## Senior Application Security EngineerApplylocations: Remote, Texas, USAtime type: Full timeposted on: Posted Yesterdayjob requisition id: JOBREQ-2616260****About the role****Unity builds the real-time 3D platform that powers games and interactive experiences, along with tools used across ads, automotive, aerospace, architecture, retail, energy, and government. Our Product Security team keeps that platform, and the software built on top of it, safe for millions of creators and their users.We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.You will work directly with engineering teams across the US and EMEA.## ## ****What you will do***** Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.* Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.* Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.* Secure Unity's AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.* Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.* Investigate and respond to application security incidents, including root cause analysis and durable corrective action.* Contribute to Unity's secure development lifecycle and to compliance work.## ## ****What you bring: domain expertise***** Experience in application security, with a track record on complex, large-scale systems.* Strong command of secure coding and common vulnerability classes (OWASP Top 10 and beyond)* Hands-on secure development experience across several languages.* Practical penetration testing, security assessment, and vulnerability management experience with standard tooling.* Experience with Cloud security (GCP, AWS, or Azure).* Working knowledge of secure architecture patterns.* Clear technical communication for both engineers and non-technical partners across regions.## ****Preferred Qualifications***** Experience in the technology, gaming or Ad tech industry****Base Salary Range:**** We determine the base salary range for this role based on your primary work location:****Zone A:**** USD $160,300 – USD $240,500 gross****Zone B:**** USD $181,200 – USD $271,800 gross****Zone C:**** USD $203,600 – USD $305,400 gross *This range reflects the anticipated base salary for this position. Beyond base salary, this role may be eligible for equity awards and participation in our company incentive plans (such as annual discretionary bonuses or sales commissions). The final offer amount will depend on several factors, including geographic location and the candidate’s relevant experience, professional background, and skill set.* **Benefits** At Unity, we want our team members to thrive. We offer a wide range of benefits designed to support well-being and work-life balance. Please note: Benefits eligibility, specific offerings, and coverage vary based on the country and employment status. While specific benefits vary, here are some of the ways we strive to take care of our eligible team members globally: Comprehensive health, life, and disability insurance | Commute subsidy | Employee stock ownership | Competitive retirement/pension plans | Generous vacation and personal days | Support for new parents through leave and family-care programs | Office food snacks | Mental Health and Wellbeing programs and support | Employee Resource Groups | Global Employee Assistance Program | Training and development programs | Volunteering and donation matching program **Life at Unity** Unity [NYSE: U] is the world’s leading game engine, powering play for more than 3 billion consumers each month. The top mobile games in the world, the most played PC indie titles, the most innovative console games, and virtually all of the top XR and Web Games are developed, deployed, and grown in Unity. Unity also enables teams across industries like automotive, manufacturing, and healthcare to design, simulate, and collaborate in 3D — closing the gap between ideas and reality. For more information, please visit www.unity.com. *Unity is a proud equal opportunity employer. We are committed to fostering an inclusive, innovative environment and celebrate our employees across age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable law. Our differences are strengths that enable us to support the growing and evolving needs of our customers, partners, and collaborators.* *If you have a disability that means there are preparations or accommodations we can make to help ensure you have a comfortable and positive interview experience, please fill out* *this form* *to let us know.* *This position requires the incumbent to have a sufficient knowledge of English to have professional verbal and written exchanges in this language since the performance of the duties related to this position requires frequent and regular communication with colleagues and partners located worldwide and whose common language is English. This posting is intended to fill an existing vacancy, and we are committed to providing applicants with updates throughout the hiring process in accordance with applicable law.* *Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Unity does not accept unsolicited headhunter and agency resumes. Unity will not pay fees to any third-party agency or company that does not have a signed agreement with Unity. Your privacy is important to us. Please take a moment to review our**Prospect* *and**Applicant* *Privacy Policies. Should you have any concerns about your privacy, please contact us at [e-mail].*