Senior/Staff Engineer, Application & Product Security

Triwill Group; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Triwill Group, in partnership with a fast-growing tech organization, seeks a Senior/Staff Engineer focused on Application & Product Security in the United States. You will shape how security is built into products and engineering practices, embedding guardrails, threat modeling, and risk management across the software lifecycle.

This role blends hands-on security engineering with close collaboration across product, engineering, DevOps, and services teams, working directly with code and

Qualifications

• Proven experience in application security engineering.
• Experience with threat modeling and secure SDLC.

Responsibilities

• Embed security requirements across the software development lifecycle.
• Collaborate with product, engineering, DevOps and services teams to implement security controls and mitigations.

Job description

Description:

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior/Staff Engineer, Application & Product Security based in the United States.

This role will help shape how security is built into products and engineering practices across a rapidly growing technology organization.
You will make secure development the default by embedding security requirements, guardrails, threat modeling, and risk management throughout the software development lifecycle.
The position combines hands-on application security engineering with close partnership across product, engineering, DevOps, and services teams.
You will work directly with source code and complex microservice architectures to identify meaningful risks and design practical solutions.
The role also offers the opportunity to influence the security of emerging AI and agent-based capabilities as they move rapidly into production.
Success requires balancing strong security outcomes with an understanding of business priorities and developer experience.
This is an execution-oriented environment for a security engineer who wants to build scalable security capabilities rather than simply identify vulnerabilities.