Staff 2: Application Security Architect (Hybrid/Remote)

Omnissa; Time (IL); Hybrid; USD 220,000 - 270,000; Full time

Benefits offered by this job

Employee ownership

Health insurance

401(k) with matching

Disability insurance

Paid‑time off

Job summary

Omnissa is seeking an Application Security Engineer – Staff 2 to join our Product Security team in a hybrid U.S. role. Remote candidates within the United States may be considered if they meet qualifications.

This senior, hands-on technical leadership role defines security standards, leads threat modeling, architecture reviews, and secure coding practices across our Java and C++ codebases, with mentoring and security program evolution.

Qualifications

• 12+ years of hands-on application security experience with demonstrated depth and influence.
• Deep knowledge of application security vulnerabilities and mitigation techniques, and judgment to prioritize them by real business and customer impact.
• Proven ability to lead threat modeling, secure design, and security architecture for complex distributed and cloud-native systems.
• Proficiency in Java or C++, with ability to read, reason about, and review production code.
• Security breadth across application, system, cloud, and mobile domains.
• History of driving technical change and raising the security bar across teams, and mentoring senior engineers.
• Excellent documentation and communication skills, including influencing engineering and product leadership.
• Self-starter who is adaptable, works independently, and brings clarity to ambiguous problems.
• Pragmatic mindset; able to identify practical short-term and long-term strategic solutions.

Responsibilities

• Set technical direction for application security across the portfolio – defining standards, patterns, and guardrails adopted by engineering teams at scale.
• Lead threat modeling for distributed, cloud-native, and mobile architectures as a repeatable practice embedded in the development lifecycle.
• Define security architecture reference designs that reduce the need for per-feature security reviews.
• Identify architectural risk early and influence roadmap and design decisions before implementation begins.
• Perform manual code review and application security testing across Java and C++ codebases; codify findings into reusable guidance.
• Scale code review coverage using AI-assisted analysis and custom CodeQL queries tuned to Omnissa's codebase.
• Conduct variant analysis to ensure confirmed vulnerability classes are remediated consistently across the codebase.
• Triage and validate externally reported vulnerabilities – assess exploitability, severity, business impact, and drive remediation to closure.
• Translate findings into systemic recommendations addressing root-cause design or implementation gaps.
• Define and evolve the SDL – identify gaps, drive measurable improvements, and own the iteration cycle.
• Improve the feature security review program so that security work shifts left into design and scales across teams.
• Mature the product penetration testing program – define scope, methodology, and cadence; ensure findings drive systemic fixes.
• Build and scale the security champions program; mentor engineers and create training that extends security capability beyond the security team.
• Establish metrics that make program effectiveness visible to engineering and product leadership.

Skills

12+ years hands-on experience

Threat modeling

Security architecture

Java

C++

Documentation

Mentoring engineers

Influencing leadership

Education

Bachelor’s degree in Computer Science or related field

Tools

CodeQL

AI tooling

Job description

Omnissa is seeking an Application Security Engineer – Staff 2 to join our Product Security team in a hybrid U.S. role. Remote candidates within the United States may be considered if they meet qualifications.

This senior, hands-on technical leadership role defines security standards, leads threat modeling, architecture reviews, and secure coding practices across our Java and C++ codebases, with mentoring and security program evolution.