Staff Application Security Engineer
$120,000–$145,000 year
RemoteUnited States
Job Summary
Design and build application security capabilities that support secure software development across NBCUniversal, including golden paths, remediation automation, and secure AI guardrails. Create reusable security automations, integrations, APIs, and developer tools that reduce manual effort while improving scalability for source code, containers, CI/CD pipelines, and software supply chains. Partner with Cloud Security and Platform Engineering teams to implement scalable solutions and improve vulnerability triage, remediation, and reporting. Mentor engineers and lead technical solutions for secure AI development and agentic workflows. Fully remote position with salary range $120,000 - $145,000 (bonus eligible).
Required Qualifications
- 8+ years of experience in Application Security, Security Engineering, DevSecOps, Software Engineering, or a related technical field
- Deep experience with secure software development, application security, vulnerability management, and software supply chain security
- Hands-on experience building security automations, integrations, APIs, platforms, developer tooling, or similar engineering solutions
- Strong software engineering and scripting skills using Python or similar languages
- Hands-on experience integrating AppSec technologies such as SAST, SCA, secrets detection, container security, CI/CD security, and vulnerability management into developer workflows
- Ability to solve complex, ambiguous technical problems and influence adoption through implementation, documentation, and collaboration
- Familiarity with AI-assisted development, agentic workflows, and related security considerations
- Fully Remote
- As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision
Desired Qualifications
- Experience with Snyk, Wiz Code, Github Advanced Security, Checkmarx, Veracode, or similar application security platforms
- Experience building secure developer platforms, internal tools, paved roads, golden paths, or reusable engineering services
- Experience across AppSec and CloudSec domains, including cloud-native architectures, containers, Kubernetes, infrastructure as code, CI/CD security, CSPM, CNAPP, or related technologies
- Experience with software supply chain security, SBOM capabilities, dependency risk workflows, or artifact security processes
- Experience using AI to improve vulnerability management, remediation workflows, security operations, or developer productivity
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.