Sr. IT Application Security Engineer

Monolithic Power Systems Inc.; Kirkland (WA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health care coverage

Dental and vision

Job summary

Monolithic Power Systems, Inc. (MPS) is seeking an IT Application Security Engineer to architect and manage application security across Microsoft Dynamics 365, Azure services, and ERP platforms (IFS).

You will build and enforce RBAC, integrate security into the product lifecycle, and partner with engineering, DevOps, IT, and product teams to foster a security‑driven mindset. Based in Kirkland, WA or San Jose, CA, the role offers a market salary with a target range of $120,000–$150,000 annually,

Qualifications

• In-depth experience with Microsoft Dynamics 365, Azure Active Directory, and IFS ERP security models.
• Advanced knowledge of RBAC, access provisioning, least-privilege, and segregation of duties.
• Hands-on expertise in secure application development, vulnerability management, code reviews, and threat modeling.
• Proficiency with security testing tools (SAST, DAST), CI/CD pipeline integration, and automation scripting.
• Strong grasp of security standards and frameworks (OWASP Top 10, NIST, ISO 27001).
• Familiarity with cloud security best practices, secure REST API development, and modern authentication mechanisms.
• Excellent communication, documentation, and stakeholder engagement abilities.
• Ability to translate security concepts for technical and non-technical audiences.
• Strong problem-solving, analytical, and incident investigation skills.
• Collaborative approach with a drive for continuous improvement and knowledge sharing.

Responsibilities

• Design, implement, and manage application security controls and RBAC for Dynamics 365, Azure, and IFS ERP.
• Conduct regular security assessments, code reviews, vulnerability scans, and penetration tests across Microsoft and ERP platforms.
• Lead application security reviews, threat modeling, and risk analysis for new product features and integrations.
• Advise development on secure architecture, design, and coding practices, serving as SME throughout the SDLC.
• Build automation for access provisioning, entitlement checks, and compliance monitoring within enterprise apps.
• Develop guidance and best practices for secure configuration, data access, and RBAC implementation.
• Train product and engineering teams on secure coding and emerging threats, fostering a security‑first mindset.
• Respond to and investigate application security incidents, drive remediation and continuous improvement.
• Maintain documentation and ensure alignment with security frameworks (NIST, OWASP, ISO 27001) and regulatory requirements.
• Collaborate with IT, DevOps, and audit teams to support audits, compliance initiatives, and ongoing security operations.

Skills

Dynamics 365 security

Azure Active Directory

IFS ERP security

RBAC & least privilege

Secure development

Vulnerability management

Security testing (SAST/DAST)

CI/CD security

Automation scripting

Education

Bachelor’s degree in CS, Cybersecurity, or related field

Tools

PowerShell

Python

Job description

Monolithic Power Systems, Inc. (MPS) is one of the fastest growing companies in the Semiconductor industry. We are worldwide technical leaders in Integrated Power Semiconductors and Systems Power delivery architectures. At MPS, we cultivate creativity, are passionate about sustainability, and are committed to providing leading-edge products and innovation to our customers. Our portfolio of technology helps power our world ---come join our team and see how YOU can make a difference.

Job Description

Job Summary The IT Application Security Engineer will be responsible for architecting and managing application security across Microsoft Dynamics 365, Azure services, and ERP platforms (IFS). The role includes building and optimizing role-based access controls (RBAC) and providing hands‑on security guidance to engineering and product development teams. This position collaborates closely with development, DevOps, IT and product teams to establish secure development practices, assess risks, and integrate security deeply into the product lifecycle. This position is integral to creating secure, scalable, and compliant application ecosystems while mentoring teams to implement security by design and robust RBAC across complex business platforms.

Key Responsibilities

• Design, implement, and manage application security controls and RBAC for Dynamics 365, Azure, and IFS ERP.
• Conduct regular security assessments, code reviews, vulnerability scans, and penetration tests across Microsoft and ERP platforms.
• Lead application security reviews, threat modeling, and risk analysis for new product features and integrations.
• Advise development on secure architecture, design, and coding practices, serving as SME throughout the SDLC.
• Build automation for access provisioning, entitlement checks, and compliance monitoring within enterprise apps.
• Develop guidance and best practices for secure configuration, data access, and RBAC implementation.
• Train product and engineering teams on secure coding and emerging threats, fostering a security‑first mindset.
• Respond to and investigate application security incidents, drive remediation and continuous improvement.
• Maintain documentation and ensure alignment with security frameworks (NIST, OWASP, ISO 27001) and regulatory requirements.
• Collaborate with IT, DevOps, and audit teams to support audits, compliance initiatives, and ongoing security operations.

Skills & Qualifications

• In-depth experience with Microsoft Dynamics 365, Azure Active Directory, and IFS ERP security models.
• Advanced knowledge of RBAC, access provisioning, least-privilege, and segregation of duties in enterprise/cloud environments.
• Hands‑on expertise in secure application development, vulnerability management, code reviews, and threat modeling.
• Proficiency with security testing tools (SAST, DAST), CI/CD pipeline integration, and automation scripting (e.g., PowerShell, Python).
• Strong grasp of security standards and frameworks (e.g., OWASP Top 10, NIST, ISO 27001).
• Familiarity with cloud security best practices, secure REST API development, and modern authentication mechanisms.
• Excellent communication, documentation, and stakeholder engagement abilities.
• Ability to translate security concepts for technical and non‑technical audiences.
• Strong problem‑solving, analytical, and incident investigation skills.
• Collaborative approach with a drive for continuous improvement and knowledge sharing.

Preferred Experience

3+ years of experience in application security roles (preferably in enterprise Microsoft or ERP environments). Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent professional experience). Certifications such as CISSP, CSSLP, or relevant Azure security credentials are a plus.

Location San Jose, CA Kirkland, WA

MPS offers a comprehensive benefits package. We provide health care coverage, dental and vision, and life and disability protection. Employees in sales positions may be eligible for our sales incentive bonuses. Employees in certain positions may be eligible for stock compensation. For more information on MPS’ benefits please view our company website at www.monolithicpower.com.

Pay is based on market location and may vary based on factors including experience, skills, education and other job‑related reasons. The target hiring range for this position is $120,000 – $150,000 annually.

Monolithic Power Systems, Inc. (MPS) is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of MPS to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.

Monolithic Power Systems, Inc. (NASDAQ: MPWR) provides small, highly energy efficient, easy‑to‑use power solutions for systems found in industrial applications, telecom infrastructures, cloud computing, automotive, and consumer applications.