Senior Application Security Engineer — Hybrid/Remote

Topcon Positioning Systems; Livermore (CA); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Topcon Positioning Group in Livermore, CA, is seeking a senior Security Engineer focused on Application Security, SecOps, and AI Security. You will lead reviews across the SDLC, triage vulnerabilities, and coordinate with offshore security vendors.

The role requires 6+ years in security engineering, strong communication, and experience with OSCP/GWAPT/CISSP preferred. You will collaborate across teams to reduce risk and mature security practices in a hybrid environment.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 6+ years in security engineering with demonstrated hands-on application security experience (secure code review, threat modeling, vulnerability remediation).
• Practical experience with Security Operations - monitoring, detection, and/or incident response.
• Proven experience maintaining an offshore or third-party vendor relationship across time zones.
• Exposure to AI/ML or LLM security concepts, or a strong demonstrated drive to ramp up quickly.
• Relevant certifications (e.g., OSCP, GWAPT, CSSLP, CISSP, or cloud security) preferred.

Responsibilities

• Lead application security reviews across the SDLC - threat modeling, secure design review, and secure code review for web, API, and cloud services.
• Triage and drive remediation of vulnerabilities from SAST, DAST, SCA, and penetration testing in partnership with engineering.
• Serve as the primary day-to-day technical contact for the offshore security vendor - scoping work, reviewing deliverables for quality, coordinating across time zones, unblocking the team, and tracking commitments and risks.
• Support detection, monitoring, alert investigation, and incident response. Help tune detections, reduce false positives, improve runbooks, and contribute to vulnerability management and infrastructure/endpoint hardening.
• Help assess and secure AI/ML and LLM-based systems (prompt injection, data leakage, model abuse, supply-chain risk) and contribute to emerging AI security standards, review processes, and guardrails.

Skills

OWASP

Secure SDLC

Cloud security

CI/CD

Containerized environments

Python scripting

Education

Bachelor's degree or equivalent practical experience

Job description

Topcon Positioning Group in Livermore, CA, is seeking a senior Security Engineer focused on Application Security, SecOps, and AI Security. You will lead reviews across the SDLC, triage vulnerabilities, and coordinate with offshore security vendors.

The role requires 6+ years in security engineering, strong communication, and experience with OSCP/GWAPT/CISSP preferred. You will collaborate across teams to reduce risk and mature security practices in a hybrid environment.