Senior Engineer, Application Security
Description
Hi there! Thanks for stopping by Are you actively looking for a new opportunity? Or just checking the market? Well… you might just be in the right place! As a Senior Application Security Engineer, you will serve as a foundational anchor on the AppSec team, leading our strategic shift hard-left toward developer-embedded security and Secure by Design operationalization. You will design, build, and scale state-of-the-art AppSec practices while collaborating closely with Vulnerability Operations to streamline vulnerability triage and remediation. Leveraging cutting-edge AI-assisted workflows and modern automation, you will eliminate friction for developers, burn down legacy risks, and fortify software lifecycles against sophisticated, emerging threat vectors. What you’ll be doing: Operationalize Secure by Design principles end-to-end, embedding seamless security controls directly into feature designs, pull requests, IaC checks, and daily engineering workflows. Architect high-impact feature and infrastructure threat models, validating and enhancing advanced AI-generated threat modeling pipelines. Configure, fine-tune, and orchestrate SAST, DAST, SCA, Secrets, and LLM scanner rulesets to eliminate false positives and streamline Vulnerability Operations. Build and stabilize new AppSec processes and ways of working while ensuring legacy security controls remain fully active. Pioneer AI-driven automation to dramatically accelerate vulnerability triage and remediation, syste --- Source: jobicy - Lightspeed Commerce
