Senior Application Security Engineer — AI-Driven Security

Openkrill; United States; Remote; USD 100,000 - 300,000; Full time

Job summary

Cogent is hiring a Senior Application Security Engineer to own the security of the software we build. You'll partner closely with engineering to embed security into the SDLC, keep dependencies and the supply chain safe, and influence product as an internal SME and early security user.

You'll also have the chance to shape security tooling and guardrails, partnering across teams to ensure security is a default, not an afterthought, in a startup-like environment.

Qualifications

• 5+ years of security engineering experience within product/application security.
• Hands-on engineer who ships, automates, and owns outcomes.
• Strong software engineering across the stack: Python, Go, TS.
• Deep in security: secure SDLC, threat modeling, code scanning, supply-chain security.
• Fluency with AI landscape and security implications for product.
• Able to operate in a startup with high ownership and ambiguity.
• Experience as an early security hire or building AppSec from scratch is a bonus.

Responsibilities

• Embed security into the software development lifecycle: threat modeling, secure design reviews, and secure-coding guidance.
• Own application security testing - code review, SAST/DAST, triage and remediation.
• Harden the software supply chain: dependency verification and safe dependency management.
• Build and automate security tooling and guardrails to scale with engineering.
• Serve as internal security SME on product decisions and act as an early user.
• Partner across teams on architecture and design so security is a default.

Skills

Security engineering

Application security

Code review

SAST/DAST

CI/CD security

Python/Go/TS

Threat modeling

Tools

Python

Go

TypeScript

CI/CD tooling

Job description

Cogent is hiring a Senior Application Security Engineer to own the security of the software we build. You'll partner closely with engineering to embed security into the SDLC, keep dependencies and the supply chain safe, and influence product as an internal SME and early security user.

You'll also have the chance to shape security tooling and guardrails, partnering across teams to ensure security is a default, not an afterthought, in a startup-like environment.