Senior AppSec Engineer - AI & Cloud Security

Devconnectplatform; Northern (KY); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical coverage

Equity

401(k)

Parental leave

Wellness programs

Unlimited PTO

Flexible work

Lunch reimbursement

Learning stipend

Job summary

Upside is seeking an experienced security engineer to own the application security program across mobile, web, and cloud systems. You will triage findings, lead threat modeling, and guide remediation with engineering teams to reduce real risk.

You will build automation, guardrails, and secure-by-default patterns in AWS, GitHub Actions, and CI/CD workflows, while collaborating with product and security teams to ship safe software at scale.

Qualifications

• 6+ years in application or product security.
• Strong Python code review skills and ability to explain issues to engineers.
• Experience with threat modeling and secure design reviews.
• Practical use of AI in security work.
• CI/CD security in GitHub Actions and cloud workflows.

Responsibilities

• Own Upside's application security program, standards, the vulnerability management pipeline, and guardrails that prevent defects.
• Lead application security reviews and threat models for high-impact work, documenting risk decisions with mitigation plans.
• Build automation that triages findings and produces remediation guidance engineers can act on.
• Develop reusable guardrails and secure-by-default patterns for AWS workloads and CI/CD pipelines.

Skills

Python

Threat modeling

Security design

Vulnerability management

CI/CD security

Tools

GitHub Actions

Copilot

Terraform

AWS Lambda

API Gateway

Job description

Upside is seeking an experienced security engineer to own the application security program across mobile, web, and cloud systems. You will triage findings, lead threat modeling, and guide remediation with engineering teams to reduce real risk.

You will build automation, guardrails, and secure-by-default patterns in AWS, GitHub Actions, and CI/CD workflows, while collaborating with product and security teams to ship safe software at scale.