Senior AppSec Engineer — Build Secure Cloud Apps (Remote)

CrowdStrike Holdings, Inc.; United States; Remote; USD 140,000 - 215,000; Full time

Benefits offered by this job

Market-leading compensation

Equity awards

Wellness programs

Professional development opportunities

Volunteer opportunities

Job summary

CrowdStrike Holdings, Inc. is seeking a Senior Application Security Engineer to secure our web applications and help fix defects at the source. You’ll work with product teams to harden vulnerabilities across the SDLC, focusing on threat modeling and secure design decisions.

You’ll review code, build automation, and collaborate with engineers to ship safer software in a fast-paced, AI-driven security culture. Remote-friendly with competitive compensation and equity.

Qualifications

• 8+ years of experience in CyberSecurity and ability to engage with engineering teams to fix defects.
• Deep understanding of software development, Agile/DevOps environments.
• Experience with threat modeling frameworks, esp. STRIDE.
• Proven manual secure code review for apps using Go, Python, or JavaScript.

Responsibilities

• Join engineering teams as a security expert influencing product design.
• Create and mature threat models to reduce attack surface.
• Review application source code for defects and risks.
• Attack applications across the SDLC and work with developers to fix issues.
• Build automation to streamline security tasks and collaborate with teams.
• Contribute to bug bounty response and expand risk coverage.

Skills

Cybersecurity experience

Threat modeling (STRIDE)

Secure code review

Go

Python

JavaScript

Browser security

Cloud security (GCP/AWS/Azure)

Agile/DevOps

API security testing

AI/Automation in security

Education

Technical security certifications

Tools

SAST

DAST

CSPM

DSPM

ASPM

Job description

CrowdStrike Holdings, Inc. is seeking a Senior Application Security Engineer to secure our web applications and help fix defects at the source. You’ll work with product teams to harden vulnerabilities across the SDLC, focusing on threat modeling and secure design decisions.

You’ll review code, build automation, and collaborate with engineers to ship safer software in a fast-paced, AI-driven security culture. Remote-friendly with competitive compensation and equity.