Application Security Engineer II

Responsibilities

• Own and deliver application security work within defined projects or domains.
• Contribute to cross-functional security initiatives, executing clearly scoped pieces of larger efforts.
• Identify, prioritize, and help remediate application security risks in partnership with engineering teams.
• Apply secure-by-default patterns and approved architectures when designing or reviewing systems.
• Partner with product and engineering teams to assess risk and recommend practical, risk-informed security improvements. Participate in application security design reviews and threat modeling for new and existing systems.
• Write code, reviews, and documentation to address vulnerabilities and reduce recurring classes of issues.
• Participate in security incident response and contribute to post-incident analysis and remediation.
• In order to be successful, you must bring
• 4+ years of experience in software engineering and/or application security.
• Practical experience with application security techniques such as threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation. Strong understanding of secure coding practices and common application security risks (e.g., OWASP Top 10).

Languages