Staff Application Security Engineer — Remote & Automation

NBCUniversal; New York (NY); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Fully remote

Job summary

NBCUniversal is seeking a Staff Cyber Systems Engineer to build and scale modern application security capabilities across the enterprise. This hands-on role blends AppSec expertise, software engineering, and automation to deliver secure development patterns and integrated developer tooling.

Lead secure-by-default paths, remediation automation, and secure AI guardrails while collaborating with Cloud Security, Platform Engineering, and Software Engineering teams.

Qualifications

• 8+ years of experience in Application Security, Security Engineering, DevSecOps, Software Engineering, or a related technical field.
• Deep experience with secure software development, application security, vulnerability management, and software supply chain security.
• Hands-on experience building security automations, integrations, APIs, platforms, developer tooling, or similar engineering solutions.
• Strong software engineering and scripting skills using Python or similar languages.
• Hands-on experience integrating AppSec technologies such as SAST, SCA, secrets detection, container security, CI/CD security, and vulnerability management into developer workflows.
• Ability to solve complex, ambiguous technical problems and influence adoption through implementation, documentation, and collaboration.
• Familiarity with AI-assisted development, agentic workflows, and related security considerations.

Responsibilities

• Design, build, and improve application security capabilities that support secure software development across NBCUniversal.
• Build reusable security automations, integrations, APIs, workflows, and developer tools that reduce manual effort and improve scalability.
• Implement secure-by-default golden paths, paved roads, and engineering patterns that make secure development easier to adopt.
• Design and implement scalable security solutions spanning source code, open source dependencies, containers, cloud-native applications, CI/CD pipelines, infrastructure as code, developer platforms, and software supply chains.
• Partner with Cloud Security on capabilities spanning application code, containers, CI/CD, infrastructure as code, cloud platforms, and software supply chain workflows.
• Improve vulnerability prioritization, triage, remediation, validation, reporting, and speed to remediation.
• Build security patterns, guardrails, and reusable implementations that support safe use of AI-assisted development tools and coding assistants.
• Build integrations between application security platforms, GitHub, CI/CD systems, developer portals, ticketing systems, reporting platforms, and other engineering tools.
• Create telemetry, dashboards, and reporting pipelines for actionable visibility into application risk, coverage, and remediation progress.

Skills

Application Security

Security Engineering

DevSecOps

Python

Automation

SAST

CI/CD

Cloud Security

Tools

Snyk

Wiz Code

Github Advanced Security

Checkmarx

Veracode

Job description

NBCUniversal is seeking a Staff Cyber Systems Engineer to build and scale modern application security capabilities across the enterprise. This hands-on role blends AppSec expertise, software engineering, and automation to deliver secure development patterns and integrated developer tooling.

Lead secure-by-default paths, remediation automation, and secure AI guardrails while collaborating with Cloud Security, Platform Engineering, and Software Engineering teams.