Senior AppSec Engineer: AI-Powered Threat Modeling

LE130 Unity Technologies SF; Texas; Hybrid; USD 181,000 - 271,000; Full time

Benefits offered by this job

Comprehensive health insurance

Commute subsidy

Employee stock ownership

Generous vacation and personal days

Parental leave programs

Office snacks

Mental Health & Wellbeing programs

Global Employee Assistance Program

Job summary

Unity Technologies seeks a Senior Application Security Engineer to drive threat modeling, secure design reviews, and code evaluation across Unity products, editors, cloud services, and APIs. You will leverage AI-assisted tooling and collaborate with U.S. and EMEA teams to strengthen defenses.

You will secure AI/agentic systems, guide remediation with secure defaults and guardrails, and contribute to the SDLC and compliance efforts.

Qualifications

• Extensive experience in application security on large-scale systems.
• Strong secure coding knowledge and OWASP Top 10 awareness.
• Hands-on secure development across multiple languages.
• Practical pentesting, security assessment, and vulnerability management.

Responsibilities

• Lead threat modeling, secure design reviews, and pen tests for Unity products and services.
• Perform deep code review and manual testing on high-risk systems with AI-assisted reviews.
• Build and operate security automation.
• Use AI-assisted tooling for continuous code review and testing, stepping in where needed.
• Secure Unity's AI and agentic systems and assess AI-native products for risks.
• Partner with engineering to remediation and secure defaults.
• Investigate and respond to security incidents and root-cause analyses.
• Contribute to Unity's secure development lifecycle and compliance work.

Skills

Threat modeling

Secure design reviews

Code review

Penetration testing

AI-assisted security tooling

Cloud security

Security automation

Secure SDLC

Technical communication

Job description

Unity Technologies seeks a Senior Application Security Engineer to drive threat modeling, secure design reviews, and code evaluation across Unity products, editors, cloud services, and APIs. You will leverage AI-assisted tooling and collaborate with U.S. and EMEA teams to strengthen defenses.

You will secure AI/agentic systems, guide remediation with secure defaults and guardrails, and contribute to the SDLC and compliance efforts.