Senior Application Security Engineer: AI-Driven SDLC

OneStream; United States; On-site; USD 114,000 - 148,000; Full time

Benefits offered by this job

Excellent Medical Plan

Life Insurance

Short & Long Term Disability

Vacation Time

Paid Holidays

Professional Development

Retirement Plan

Job summary

OneStream is seeking an Application Security Engineer to join the Information Security team. You will triage and validate findings from security tools, partner with engineering to remediate vulnerabilities, and support security design reviews and threat modelling for new features.

You’ll use automation and AI-assisted tooling to reduce repetitive work and help teams focus on high-impact security problems. Ideal candidates have software development and security experience, with secure development

Qualifications

• 5+ years of experience in application security, software development, or DevSecOps
• 1+ year of experience with application security, software development, or DevSecOps (MS/MA path)
• 5+ years with CS/Engineering associate path in security domain

Responsibilities

• Triage and validate findings from application security tools (SAST, SCA, DAST)
• Remediate vulnerabilities with clear, practical guidance with Development teams
• Participate in security architecture reviews and threat modelling
• Integrate security tooling into CI/CD pipelines
• Use AI-assisted tools to streamline repetitive security tasks
• Review SDLC and third-party dependencies to improve security

Skills

SAST

SCA

DAST

Python

PowerShell

CI/CD

Burp Suite

AI tooling

Education

BSc/BA in Computer Science or related

MSc/MA in Computer Science or related

Assoc. in CS/Engineering

Tools

C# & .NET

Secure coding practices

Job description

OneStream is seeking an Application Security Engineer to join the Information Security team. You will triage and validate findings from security tools, partner with engineering to remediate vulnerabilities, and support security design reviews and threat modelling for new features.

You’ll use automation and AI-assisted tooling to reduce repetitive work and help teams focus on high-impact security problems. Ideal candidates have software development and security experience, with secure development