Senior Application Security Engineer - Remote/Hybrid

Remote; San Francisco (CA); Hybrid; USD 183,000 - 215,000; Full time

Benefits offered by this job

Equity

Hybrid-hub model

Bonuses or commissions

Job summary

Engine is seeking a highly-skilled Staff Security Engineer to own the security of our applications and systems, building a vulnerability management pipeline and driving our application security program across engineering teams.

You will implement SIEM, perform architecture reviews, conduct light pentesting, and collaborate to enforce secure coding practices while staying current on threats.

Qualifications

• Proficient in one or more programming languages with secure coding practices.
• Experience with SIEM, cloud security concepts and incident response.
• Knowledge of OWASP Top 10, Mitre Top 25, and security best practices.

Responsibilities

• Own the configuration, tuning, and management of our SIEM solution.
• Perform architecture and code reviews, with light pentesting of apps.
• Maintain and optimize vulnerability management within CI/CD pipelines.
• Collaborate with development and infra teams to enforce secure coding.

Skills

Ruby

Java

Python

C#

Node.js

Tools

Docker

Kubernetes

SAST

DAST

IAST

OWASP Top 10

Job description

Engine is seeking a highly-skilled Staff Security Engineer to own the security of our applications and systems, building a vulnerability management pipeline and driving our application security program across engineering teams.

You will implement SIEM, perform architecture reviews, conduct light pentesting, and collaborate to enforce secure coding practices while staying current on threats.