Senior Application Security Engineer – Cloud, SDLC & Automation

Dream; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Dream is seeking a Senior AppSec Engineer to plan, build, and support security across the organization. You’ll own application security throughout the SDLC, including security requirements, threat modeling, reviews, and production hardening.

You’ll partner with Security, Engineering, Platform, DevOps, and IT teams to reduce risk at scale, and report on metrics like control coverage and remediation timelines. Strong Python and automation skills are required.

Qualifications

• 6+ years in security engineering, app security, or cloud security with hands-on ownership.
• Deep expertise in application/security or cloud security with cross-domain capability.
• Strong programming and automation skills; Python required; Go or Bash beneficial.

Responsibilities

• Own application security across the SDLC from requirements to production hardening.
• Perform threat modeling, secure design reviews, code reviews, and API testing.
• Develop and report security metrics, remediation timelines, and baseline compliance.
• Strengthen cloud/platform security with scalable controls and guardrails.
• Collaborate with Security, Engineering, Platform, DevOps, and IT teams.

Skills

Security engineering

Threat modeling

Secure SDLC

Code review

Application security

Cloud security

Automation

Python programming

CI/CD security

Kubernetes security

Threat remediation

Tools

Terraform

OPA/Sentinel

CI/CD pipelines

SAST/DAST/SCA

Kubernetes

IAM/security tooling

Job description

Dream is seeking a Senior AppSec Engineer to plan, build, and support security across the organization. You’ll own application security throughout the SDLC, including security requirements, threat modeling, reviews, and production hardening.

You’ll partner with Security, Engineering, Platform, DevOps, and IT teams to reduce risk at scale, and report on metrics like control coverage and remediation timelines. Strong Python and automation skills are required.