Senior Engineer, Application Security

Cybersecurity Jobs; San Diego (CA); In loco; USD 120.000 - 190.000; Tempo pieno

Vantaggi offerti da questo lavoro

Bonus

Benefits

Equity

Temporary benefits package after 60d

Descrizione del lavoro

Shield AI is seeking a Senior Application Security Engineer to support its Hivemind Enterprise product from its cybersecurity engineering organization in San Diego, CA. This onsite role centers on applying application security policies, embedding automated scanning into CI/CD, and partnering closely with developers to drive issues to resolution.

You will also help shape how the product is designed, using threat modeling and secure coding standards to improve security from the start.

Competenze

• Bachelor’s degree with 5+ years or Master’s with 4+ years in cybersecurity or software engineering.
• Experience developing or testing cyber secure code.
• Strong knowledge of CI/CD, automated testing, configuration management, and software lifecycle.
• Familiarity with threat modeling.
• Experience using static/dynamic analysis, dependency mapping, and CVE scanning.
• Comfort working in a Linux development environment.

Mansioni

• Define application security policies with the security engineering team.
• Deploy and configure scanning tools within CI/CD pipelines.
• Review scanning results and help developers fix issues.
• Work with architecture to design secure-by-default software.
• Perform threat modeling and validate designs align with secure coding standards.

Conoscenze

CI/CD

Threat modeling

Secure coding practices

Static analysis

Dynamic analysis

Dependency mapping

CVE scanning

Linux

Cryptography basics

Cross-functional collaboration

Formazione

Bachelor's degree

Master's degree

Strumenti

GitLab

Scanning tools

CI/CD pipelines

Descrizione del lavoro

Shield AI is seeking a Senior Application Security Engineer to support its Hivemind Enterprise product from its cybersecurity engineering organization in San Diego, CA. This onsite role centers on applying application security policies, embedding automated scanning into CI/CD, and partnering closely with developers to drive issues to resolution. You will also help shape how the product is designed, using threat modeling and secure coding standards to improve security from the start.

What you’ll do

• Join the cybersecurity engineering team as part of the Hivemind application security function to help define application security policies.
• Deploy and configure scanning tools within CI/CD pipelines so security checks are executed as part of the software lifecycle.
• Review scanning results and collaborate directly with developers to identify and fix security issues in code.
• Work with the architecture team to address security early by designing secure-by-default software.
• Perform threat modeling and validate designs align with the team’s secure coding standards.

What you bring

• Bachelor’s degree with approximately 5+ years of relevant experience, or a Master’s degree with approximately 4+ years of relevant experience in cybersecurity, software engineering, or a closely related technical field.
• Experience developing or testing cyber secure code.
• Strong understanding of modern software engineering practices, including CI/CD, automated testing, configuration management, and software lifecycle processes.
• Familiarity with threat modeling.
• Experience with software analysis tools such as static analysis, dynamic analysis, dependency mapping, and CVE scanning (including related practices).
• Comfort working in a Linux development environment.
• Strong organizational, communication, and cross-functional collaboration skills.
• Basic understanding of key cryptography concepts.

Technologies

• CI/CD
• static analysis
• dynamic analysis
• dependency mapping
• CVE scanning
• Linux
• cryptography

Compensation and benefits

• Salary range: USD 120,000 - 190,000 per year.
• Bonus + Benefits + Equity (in addition to pay within the listed range).
• Pay within range listed above plus a temporary benefits package (applicable after 60 days of employment).

Preferred qualifications

• Previous experience on an application security team for a large, complex software product.
• Experience as a DevSecOps engineer, especially in a GitLab environment.
• Experience writing software or testing Python, C/C++, and/or Go.
• Red-teaming experience.
• Software reverse engineering skills.