Senior Application Security Engineer - Secure-by-Design

VulnU; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Shield AI is seeking an Application Security Engineer for the Hivemind platform to strengthen our cybersecurity engineering team and secure our software lifecycle.

You will define security policies, deploy scanning tools in CI/CD, review results with developers, and collaborate with the architecture team to design secure-by-default products, performing threat modeling and ensuring compliance with secure coding standards.

Qualifications

• Bachelor’s degree with 5+ years in cybersecurity or software engineering.
• Master’s degree with 4+ years in cybersecurity or software engineering.
• Experience developing or testing cyber secure code.
• Knowledge of CI/CD, automated testing, configuration management, and software lifecycle processes.
• Familiarity with threat modeling.
• Experience with software analysis tools (static, dynamic, dependencies, CVE).
• Comfortable in a Linux development environment.
• Strong organizational, communication, and cross-functional collaboration skills.

Responsibilities

• Define application security policies and deploy/ configure scanning tools in CI/CD pipelines.
• Review scanning results and work with developers to fix issues in code.
• Collaborate with architecture to design secure-by-default software and perform threat modeling.
• Validate designs meet our secure coding standards.

Skills

Cybersecurity

Software engineering

CI/CD

Threat modeling

Linux

Security testing

Python

Go

C/C++

Education

Bachelor’s degree

Master’s degree

Tools

Static analysis tools

Dynamic analysis tools

Dependency mapping

CVE scanning

GitLab

Job description

Shield AI is seeking an Application Security Engineer for the Hivemind platform to strengthen our cybersecurity engineering team and secure our software lifecycle.

You will define security policies, deploy scanning tools in CI/CD, review results with developers, and collaborate with the architecture team to design secure-by-default products, performing threat modeling and ensuring compliance with secure coding standards.