Senior AppSec Engineer — Threat Modeling & Secure SDLC

Nebius Group; United States; Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Competitive compensation

Career growth and learning

Flexibility and ownership

Collaborative and innovative culture

Impactful AI projects

International environment

Job summary

Nebius is seeking a Senior Application Security Engineer to safeguard our software by identifying and mitigating vulnerabilities, and by implementing secure coding and threat modeling practices. You will collaborate with development teams to embed security across the SDLC and shape secure coding guidelines.

This role involves building ASPM, automating SAST/ SCA, and staying ahead of the latest security threats.

Qualifications

• 6+ years of experience in application security.
• Experience with secure coding in languages such as Python, Go, Java, or JavaScript.
• Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.).
• Understanding of authentication protocols like SAML or OIDC.
• Experience in conducting threat-modeling sessions.

Responsibilities

• Build and maintain Application Security Posture Management (ASPM) at the Company scale.
• Automate and support SAST, SCA tools as part of CI/CD pipelines.
• Improve SAST, secrets detection rules and keep false positives low.
• Identify, analyze, and remediate application security vulnerabilities.
• Collaborate with development teams to integrate security into the SDLC.
• Develop and maintain secure coding guidelines for development teams.
• Conduct threat modeling and risk assessments for new and existing applications.
• Provide development teams with threat modeling and vulnerability detection tools.
• Stay updated on the latest security threats and mitigation techniques.
• Serve as an application security SME to other teams.

Skills

Secure coding practices

OWASP Top 10 awareness

Threat modeling

Security testing

CI/CD security automation

Tools

Burp Suite

ZAP

Semgrep

Job description

Nebius is seeking a Senior Application Security Engineer to safeguard our software by identifying and mitigating vulnerabilities, and by implementing secure coding and threat modeling practices. You will collaborate with development teams to embed security across the SDLC and shape secure coding guidelines.

This role involves building ASPM, automating SAST/ SCA, and staying ahead of the latest security threats.