Staff Application Security Engineer - Secure SDLC Leader

Shieldai; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Shield AI is seeking a Staff Application Security Engineer to build and advance a scalable secure software program across teams.

You will establish company-wide secure SDLC policies, translate them into practical engineering requirements, and collaborate with product, platform, and development teams to improve security and software supply-chain maturity. This is an influential IC role reporting to engineering leadership.

Qualifications

• Experience designing, implementing, or maturing a secure SDLC or application‑security program across multiple teams.
• Strong knowledge of secure coding practices, vulnerability management, and DevSecOps.
• Ability to read and assess production code and scripts in one or more modern languages.

Responsibilities

• Establish, maintain, and continuously improve company‑wide secure SDLC policies, standards, control objectives, procedures, and supporting evidence requirements.
• Translate security policy into clear, achievable requirements for development, product, and platform teams without friction.
• Assess development teams, CI/CD pipelines, source control, build environments, and release processes; lead practical roadmaps.
• Develop secure‑development guidance, reference architectures, reusable patterns, guardrails, and developer enablement materials.
• Partner with development teams to triage, remediate, and verify application‑security findings.
• Lead threat modeling, security requirements, and secure design/architecture reviews for high‑risk apps.
• Establish risk‑based vulnerability management processes, including SLAs and compensating controls.
• Mature software supply‑chain security practices (SBOMs, VEX, build provenance, signing, and governance).

Skills

Application security

DevSecOps

Secure SDLC

Threat modeling

Security governance

Communication

Cross-functional collaboration

Reading production code

Tools

SAST

DAST

SCA

Secrets detection

IaC security scanning

Container security scanning

API security controls

Job description

Shield AI is seeking a Staff Application Security Engineer to build and advance a scalable secure software program across teams.

You will establish company-wide secure SDLC policies, translate them into practical engineering requirements, and collaborate with product, platform, and development teams to improve security and software supply-chain maturity. This is an influential IC role reporting to engineering leadership.