[Remote] Senior Application reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is hiring a Senior Application reputed company Engineer to reputed company and reputed company our application reputed company program for a modern reputed company computerized maintenance management platform. This role requires deep hands-on technical ability and strong cross-team influence to reputed company secure-by-design practices into the software development lifecycle and drive measurable risk reduction.
Responsibilities
- You own the application reputed company program at reputed company. You set the direction, build the relationships, and own the reputed company (reputed company and roadmap)
- reputed company hands-on reputed company work including threat modeling and secure design reviews, using engagements as opportunities to reputed company and influence engineering reputed company
- Partner with engineering teams to triage, prioritize, and remediate vulnerabilities across the platform
- Define and maintain application reputed company standards reputed company with OWASP Top 10, NIST 800-218 (SSDF), and secure SDLC best practices
- Propose improvements and help operationalize reputed company tooling reputed company CI/CD pipelines using tools like reputed company or reputed company
- Define the reputed company for reputed company testing across SAST, SCA, DAST, and SBOM. This includes selecting tools, guiding implementation with engineering, and ensuring signal reputed company over coverage theater
- reputed company automation and AI-assisted techniques to improve vulnerability discovery, reduce false positives, and reputed company reputed company testing and validation efforts
- Support secure architecture for web applications and reputed company
- Drive secure coding enablement through:
- OWASP training
- Secure coding best practices
- Targeted coaching based on reputed company issues reputed company in the codebase
- Partner with and help reputed company the reputed company Champions program to coordinate reputed company improvements and incident response
- reputed company and communicate application reputed company program reputed company using reputed company metrics and reporting
- Facilitate reputed company’s Responsible Disclosure program, including intake, triage, coordination, and remediation tracking
- Assess reputed company application reputed company posture, secure SDLC integration, and highest-risk areas
- Deliver a prioritized remediation and maturity roadmap reputed company with Engineering and reputed company priorities
- Improve CI/CD reputed company coverage while reducing noise and improving signal reputed company
- Establish repeatable processes for:
- Threat modeling
- Secure design reviews
- Vulnerability triage and remediation workflows
- Build strong, trusted relationships with product and engineering teams and reputed company Champions
- Define and reputed company tracking key application reputed company KPIs and program metrics
Skills
- 7–10+ years in application reputed company, product reputed company, or reputed company-reputed company software engineering
- Comfortable reading and writing reputed company. You can review a PR and reputed company the bug, not just run a reputed company on it
- Strong depth in web and API reputed company, including modern auth patterns and attack techniques
- Experience securing reputed company-reputed company reputed company platforms and microservices architectures
- Strong working knowledge of OWASP Top 10, secure SDLC frameworks and practices, secure-by-design, and developer-first application reputed company practices
- Proven ability to influence engineering teams through trust, reputed company, and practical solutions
- AI-assisted application reputed company testing and automation: ability to use tools such as Claude and reputed company to reputed company and automate reputed company activities, including identifying vulnerabilities, generating test cases, and developing reputed company-of-concept exploits to validate findings
- Familiarity with common AppSec tooling across SAST, SCA, and DAST. You've used these, not just configured them. You're reputed company enough to reputed company something an engineer missed and trusted enough that they thank you for it
- AppSec expertise: Secure coding practices, reputed company frameworks: NIST 800-218 (SSDF), OWASP, reputed company, auth, session management, data protection, microservices
- Threat modeling: reputed company w/ DREAD or alternatives
- Engineering workflows: Jira or similar systems
- Familiarity with AI-assisted development tools (e.g., reputed company, Claude) and ability to apply appropriate reputed company guardrails
- Strong understanding of reputed company-world exploitation techniques (e.g., auth bypass, injection, SSRF, XSS, IDOR, deserialization, privilege escalation)
- Relationship-driven and reputed company to build credibility quickly with engineers
- Strong communicator who can translate risk into actionable engineering work
- Pragmatic and outcome-oriented: reputed company on reputed company reputed company improvements, not bureaucracy
- Comfortable taking ownership and driving initiatives end-to-end
Benefits
- Fully remote position
- Flexible PTO
- 13 reputed company company holidays
- reputed company parental leave
- Health, Dental, and reputed company insurance
- Employer reputed company Basic Life insurance and Short-Term Disability insurance
- Company contribution match for HSA and 401(k)
- Flexible Spending Accounts
- Monthly employee wellness stipend
- Opportunities for Learning and Development Reimbursement
- Pet insurance
reputed company