Senior Application Security Engineer – AI & SecOps Lead

Topcon Positioning Systems (Topcon); Livermore (CA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Topcon Positioning Group, headquartered in Livermore, CA, seeks a Senior Security Engineer focused on Application Security within a broader Security Engineering team. You will lead secure design reviews, triage vulnerabilities across SAST/DAST/SCA, and guide remediation across the SDLC while collaborating with engineering and offshore partners.

Responsibilities include managing offshore vendor relationships, supporting Security Operations, incident response, and contributing to AI/ML security

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• 6+ years in security engineering with hands-on application security experience.
• Experience with Security Operations – monitoring, detection, and incident response.
• Proven experience maintaining offshore/vendor relationships across time zones.
• Certifications such as OSCP, GWAPT, CSSLP, CISSP, or cloud security are preferred.

Responsibilities

• Lead application security reviews across the SDLC: threat modeling, secure design, and secure code review for web, API, and cloud services.
• Triage and drive remediation of vulnerabilities from SAST, DAST, SCA, and pentesting with engineering.
• Serve as the primary day-to-day technical contact for offshore security vendor relationships.
• Support detection, monitoring, alert investigations, and incident response; contribute to vulnerability management and hardening.

Skills

Application security

Threat modeling

Secure code review

SAST/DAST/SCA

Offshore vendor management

Education

Bachelor's degree in Computer Science or related field

Job description

Topcon Positioning Group, headquartered in Livermore, CA, seeks a Senior Security Engineer focused on Application Security within a broader Security Engineering team. You will lead secure design reviews, triage vulnerabilities across SAST/DAST/SCA, and guide remediation across the SDLC while collaborating with engineering and offshore partners.

Responsibilities include managing offshore vendor relationships, supporting Security Operations, incident response, and contributing to AI/ML security