Senior AppSec Incident Engineer — Hybrid/Remote

Thales Group; San Jose, Northern (CA, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Job summary

Thales Group in San Jose is seeking a Sr Engineer for the Advanced Security Response Team (ASRT). You will lead incident responses, own complex customer issues, and drive real-time protection across web applications while mentoring engineers and promoting best practices in security operations.

You will collaborate with Services, CS, Threat Research, and Product teams to resolve high-impact incidents, analyze traffic and attack trends, and design automated security policies to reducefalse

Qualifications

• Minimum 4-year degree in Information Systems or Computer Science or Telecommunications or related tech field.
• 6+ years in application or network security in a customer-facing role; 3+ years in Security Engineering/Threat Mitigation, or 4 years with a Master’s.
• Experience with Internet security tech (TCP/IP, HTTP, SSL/TLS, Proxies, Firewalls, OWASP Top 10).

Responsibilities

• Serve as a senior technical resource for ASR, providing leadership and mentoring engineers.
• Own technical resolution of complex customer issues, escalations, and incidents.
• Collaborate with multiple internal teams to resolve high-impact issues and improve products.

Skills

Threat analysis

Incident response leadership

Web application security

Customer interaction

Scripting (Python/bash/Java)

Education

Bachelor's degree in Information Systems/CS/Telecommunications

Tools

Python scripting

HTTP/SSL tools

Job description

Thales Group in San Jose is seeking a Sr Engineer for the Advanced Security Response Team (ASRT). You will lead incident responses, own complex customer issues, and drive real-time protection across web applications while mentoring engineers and promoting best practices in security operations.

You will collaborate with Services, CS, Threat Research, and Product teams to resolve high-impact incidents, analyze traffic and attack trends, and design automated security policies to reducefalse