Senior AppSec Engineer: Lead Secure SDLC & Cloud Security

Torsap Thai Kitchen; San Francisco (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Torsap Thai Kitchen is seeking a Senior Application Security Engineer to own and advance our application security program in San Francisco. You will partner with engineering teams to embed secure development practices, improve tooling, and guide security for new features and services.

This high-impact role shapes AppSec at a growing company that prioritizes security as a core product quality driver. You will lead security reviews, automate controls, and mentor developers in secure design and

Qualifications

• 3–7+ years in Application/Product Security or related role.
• Strong secure coding practices and knowledge of SDLC.
• Experience with cloud-native apps, preferably AWS.

Responsibilities

• Own and drive the application security program.
• Guide security considerations for new features and architectures.
• Lead secure coding and threat modeling across teams.
• Integrate security tooling into CI/CD pipelines and automate workflows.
• Coach developers through secure design and reviews.
• Collaborate with DevOps on secure AWS deployments.

Skills

AppSec

Secure coding

OWASP Top 10

AWS

CI/CD security

SAST/DAST tools

Team collaboration

GitHub Actions

Education

Bachelor's degree in CS/CE

Tools

GitHub Advanced Security

Invicti

Hadrian

AppDome

Cloudflare WAF

Job description

Torsap Thai Kitchen is seeking a Senior Application Security Engineer to own and advance our application security program in San Francisco. You will partner with engineering teams to embed secure development practices, improve tooling, and guide security for new features and services.

This high-impact role shapes AppSec at a growing company that prioritizes security as a core product quality driver. You will lead security reviews, automate controls, and mentor developers in secure design and