Senior AppSec Engineer: Shift-Left Security Champion

Remote; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

vivenu is seeking a Senior Security Engineer - AppSec (d/f/m) to lead security across our live entertainment tech platform. You will drive the entire AppSec lifecycle, from offensive red teaming and threat modeling to risk-based vulnerability management and security automation in CI/CD.

You will partner with engineering teams to design secure-by-design systems, implement SAST/DAST, and push a true shift-left security culture across multi-cloud deployments (GCP, Kubernetes) and a TypeScript/Go

Qualifications

• 5+ years of dedicated Security Engineering experience in SaaS, E-commerce, or Fintech.
• Deep understanding of web/API attack vectors and scalable security practices.
• Ability to own security initiatives from conception to completion.
• Automation mindset with scripting or security tool development.
• Bachelor’s or Master’s degree in CS/Cybersecurity/IT or equivalent experience.
• Experience with securing workloads in cloud environments (k8s, AWS/GCP/Azure).

Responsibilities

• Be a Trusted Advisor to engineering teams and elevate security posture.
• Coordinate and execute threat modeling and security tests across product and infra.
• Lead risk-based vulnerability management using modern principles like EPSS.
• Design and automate security checks into CI/CD (SAST/DAST/secret scanning).
• Review code and configurations to promote secure coding and shift-left practices.

Skills

Security engineering

Threat modeling

Web security

API security

Automation

Cloud security

Education

Bachelor’s or Master’s in CS/Cybersecurity/IT

Tools

Terraform

Kubernetes

CI/CD pipelines

GCP

Go

TypeScript

Job description

vivenu is seeking a Senior Security Engineer - AppSec (d/f/m) to lead security across our live entertainment tech platform. You will drive the entire AppSec lifecycle, from offensive red teaming and threat modeling to risk-based vulnerability management and security automation in CI/CD.

You will partner with engineering teams to design secure-by-design systems, implement SAST/DAST, and push a true shift-left security culture across multi-cloud deployments (GCP, Kubernetes) and a TypeScript/Go