Senior AppSec Engineer — Build Secure AI Platforms

Cogent Security; San Francisco (CA); Presencial; USD 100.000 - 300.000; Jornada completa

Descripción de la vacante

Cogent Security is hiring a Senior Application Security Engineer to own the security of the software we build. You’ll partner with engineering to embed security into the SDLC, keep dependencies and supply chain safe, and shape product security as an internal SME and early user of what we ship.

You’ll drive threat modeling, code reviews, SAST/DAST, and CI/CD security, while building tooling to scale security with engineering and ensuring security is a default, not an afterthought.

Formación

• 5+ years of security engineering experience in product/application security.
• Hands-on engineer who ships and automates.
• Strong software engineering skills across the stack (Python/Go/Typescript).

Responsabilidades

• Embed security into the software development lifecycle via threat modeling, secure design reviews, and secure coding guidance.
• Own application security testing—code review, SAST/DAST, triage, and remediation.
• Harden the software supply chain through dependency verification and safe dependency management.
• Build and automate security tooling and guardrails to scale with engineering.
• Serve as the internal security SME on product decisions and early user of our security features.
• Partner with teams on architecture and design so security is a default.

Conocimientos

Security Engineering

Application Security

Threat Modeling

Secure SDLC

Code Review

SAST/DAST

Supply Chain Security

Python/Go/Typescript

DevSecOps

Herramientas

SAST tools

DAST tools

CI/CD security

Descripción del empleo

Cogent Security is hiring a Senior Application Security Engineer to own the security of the software we build. You’ll partner with engineering to embed security into the SDLC, keep dependencies and supply chain safe, and shape product security as an internal SME and early user of what we ship.

You’ll drive threat modeling, code reviews, SAST/DAST, and CI/CD security, while building tooling to scale security with engineering and ensuring security is a default, not an afterthought.