Staff Application Security Engineer

Job Summary

Required Qualifications

• 8+ years of experience in application security, secure software development, and cloud infrastructure security
• Experience securing APIs, microservices architectures, and addressing modern infrastructure security challenges
• Deep understanding of authentication and authorization protocols such as OAuth, OIDC, SAML, and JWT
• Hands-on experience with static application security testing (SAST) and software composition analysis (SCA) tools
• Developer-level proficiency in at least one programming language—preferably Python, Java, JavaScript, or Golang
• Familiarity with front-end and back-end technologies such as React, Next.js, TypeScript, Node.js, GraphQL, and/or Java
• Creative, resourceful, and adaptive problem-solving capabilities
• Excellent communication skills, both written and oral, with the ability to effectively engage with stakeholders at all levels
• Strong ability to work independently and collaboratively across various teams, linking tactical initiatives to long-term strategic outcomes
• A genuine passion for security and continuous learning

Desired Qualifications

• Proven track record mentoring and developing junior team members
• Relevant experience in offensive security, penetration testing, or red teaming
• Expertise of cloud-native (AWS) technologies including containers, Kubernetes, and infrastructure-as-code (Terraform)
• Experience with Gitlab CI/CD
• Contributions to the security community through open-source projects, research papers, or conference presentations