Staff Application Security Engineer

Temporal Technologies; Oregon; Hybrid; USD 130,000 - 180,000; Full time

Job summary

Temporal is seeking a Staff Application Security Engineer to secure the Temporal development pipeline, product, and customer environments across clouds. You will work closely with software engineering teams and customers to bake security into our platform and to build AI-assisted security workflows.

You will lead threat modeling, drive security strategy, and own vulnerability management across cloud and open source, while participating in on-call rotations to safeguard multi-tenant deployments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 7+ years in application or product security or related role.
• Proven partnership with engineering teams, bringing security expertise to the planning and development process.
• Ability to write production-quality code in at least one programming language.
• Knowledge of encryption, authentication, and secure communication protocols.
• Familiarity with SAST, DAST, and penetration testing frameworks.
• Deep understanding of application architecture and design principles.

Responsibilities

• Collaborate with product and engineering teams to integrate security into design and architecture.
• Lead threat modeling and risk assessments to identify vulnerabilities and attack vectors.
• Drive security strategy and set direction across teams or org-wide.
• Manage the Secure Development pipeline including code security and third-party supply chain security.
• Translate emerging standards into internal security policies and guardrails.
• Own disclosed vulnerabilities in Cloud and Open Source products.
• Participate in on-call rotation.

Skills

Threat modeling

Risk assessment

Security architecture

Code writing

SAST/DAST tools

RBAC design

Kubernetes security

Cloud security

Communication

Education

BSc in CS/Cybersecurity

Tools

SAST

DAST

Penetration testing

Kubernetes

Go

Job description

Role Summary

Join our dynamic team as a Staff Application Security Engineer , where you'll play a pivotal role in securing the Temporal development pipeline, product, and customer execution environment. In this position, you'll work closely with software engineering teams and customers to build security deeply into our platform across multiple clouds. You'll also build production ready AI assisted security workflows with the right guardrails. We're looking for individuals who are passionate about enabling engineering teams to build and ship securely, serving as trusted security partners across the organization.

What You'll Do

• Collaborate with product and engineering teams to integrate security principles into the design and architecture of products.
• Lead complex threat modeling and risk assessments to identify vulnerabilities and potential attack vectors across the full product surface.
• Drive strategy, influence architecture, and set direction for security across multiple teams or org-wide.
• Manage the Secure Development pipeline including code security and 3rd party library supply chain security.
• Stay current on emerging standards and guidance (e.g. OWASP Top 10 for LLMs, MCP security specifications) and translate these into actionable internal policy.
• Own responsibility disclosed vulnerabilities in both Cloud and Open Source products.
• Able to participate in on-call rotation.

What You'll Bring

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 7+ years in application or product security or a related role.
• Proven partnership with engineering teams, bringing security expertise to the planning and development process.
• Ability to write production-quality code in at least one programming language, with a history of development beyond simple scripting.
• Knowledge of encryption, authentication, and secure communication protocols.
• Familiarity with tools like SAST, DAST, and penetration testing frameworks.
• A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
• Excellent communication and ability to explain complex security concepts to non-technical stakeholders.
• Kubernetes security posture management and auditing, including workload hardening, RBAC design, and admission control.
• Demonstrated experience with multi-tenant security architecture, including data plane isolation, control plane hardening, and cross-tenant data leakage prevention.

Nice to Have

• Distributed computing and related vulnerability experience.
• Familiarity with Go.
• Running a Security Champions program.
• Open Source automation or automation projects.
• Expertise in other areas of security.
• Security conference talks or published research.

Temporal Technologies is an Equal Opportunity Employer. Temporal Technologies does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need. We embrace and celebrate differences and diversity.Temporal is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. If you need to request a reasonable accommodation, please let your Recruiter know so we can assist.