Staff II: Lead Application Security Architect

Omnissa; Washington; Hybrid; USD 220,000 - 270,000; Full time

Benefits offered by this job

Employee ownership

Health insurance

401(k) with matching

Disability insurance

Paid time off

Growth opportunities

Job summary

Omnissa seeks an Application Security Engineer – Staff 2 to set technical direction for secure software across the product portfolio. This senior role emphasizes hands-on leadership without people management, shaping security practices across cloud-native, distributed systems.

Based in the United States with hybrid work in Atlanta or Mountain View preferred, you will mentor engineers, run threat modeling, review Java/C++ code, and evolve the SDL and penetration testing program to raise the

Qualifications

• 12+ years hands-on application security experience.
• Deep knowledge of vulnerabilities and mitigations with business impact in mind.
• Proven leadership in threat modeling, secure design, and security architecture for complex systems.
• Proficiency in Java or C++, able to read and review production code.
• Security breadth across app, cloud, and mobile domains.
• Experience driving technical change and mentoring senior engineers.
• Excellent documentation and communication, influencing leadership.
• Self-starter who works independently and clarifies ambiguous problems.
• Pragmatic with short- and long-term strategic solutions.

Responsibilities

• Set technical direction for application security across the portfolio.
• Lead threat modeling for cloud-native, distributed, and mobile architectures.
• Define security architecture reference designs to reduce per-feature reviews.
• Identify architectural risk and influence roadmap and design decisions.
• Perform manual code review and security testing of Java and C++ code.
• Scale code review with AI-assisted analysis and CodeQL queries.
• Triage and validate externally reported vulnerabilities and drive remediation.
• Translate findings into systemic, design-level improvements.
• Define and evolve the SDL and improve the security review program.
• Mature the product penetration testing program and drive systemic fixes.
• Build security champions program; mentor engineers and create training.
• Establish metrics to show program effectiveness.

Skills

Hands-on app security

Threat modeling

Security architecture

Java

C++

Documentation & communication

Mentoring engineers

Self-starter

Pragmatic problem solving

Education

Bachelor's degree in Computer Science or related field

Tools

CodeQL

AI tooling

Code review

Job description

Omnissa seeks an Application Security Engineer – Staff 2 to set technical direction for secure software across the product portfolio. This senior role emphasizes hands-on leadership without people management, shaping security practices across cloud-native, distributed systems.

Based in the United States with hybrid work in Atlanta or Mountain View preferred, you will mentor engineers, run threat modeling, review Java/C++ code, and evolve the SDL and penetration testing program to raise the