Staff Application Security Engineer

Accountabilities:: Own and continuously improve the organization's SIEM, including configuration, tuning, monitoring, and development of effective alerts that identify and support response to threats across multiple layers. Conduct security architecture reviews, code reviews, and infrastructure configuration assessments to identify risks and recommend practical remediation strategies. Perform targeted penetration testing of web and mobile applications, manually validating vulnerabilities and investigating their underlying causes. Build, maintain, and optimize vulnerability management processes and CI/CD pipelines across container and application delivery environments. Partner closely with software development and infrastructure teams to promote secure coding practices, prioritize remediation, and resolve complex security issues. Develop and maintain security frameworks, tooling, and engineering standards that make security requirements clear, scalable, and actionable across the organization. Contribute to incident response and forensic investigations, using technical evidence and business context to make sound decisions during high-pressure situations. Monitor emerging threats and security trends and translate them into practical recommendations for engineering teams. Develop and support security awareness and training initiatives that strengthen security knowledge and empower engineers to build more secure systems. Operate independently while maintaining strong communication and alignment with stakeholders across engineering, infrastructure, and security functions. Requirements: Significant professional experience in application security, security engineering, software engineering, or a closely related discipline, with demonstrated ownership of security outcomes. Advanced proficiency in at least one programming language such as Ruby, Java, Python, C#, or Node.js. Strong hands-on experience managing SIEM platforms, developing effective detection and alerting strategies, and reducing unnecessary alert noise. Deep understanding of cloud environments and container technologies, including Docker and Kubernetes, with experience implementing automated container vulnerability management. Extensive experience with application security testing methodologies and tools, including SAST, DAST, and IAST, combined with the ability to manually validate security findings. Strong knowledge of established security principles and frameworks, including the OWASP Top 10, MITRE Top 25, and secure software development practices. Experience conducting security architecture, code, infrastructure, and application reviews, with the ability to identify root causes and recommend effective remediation. Experience with cloud security concepts and compliance frameworks such as SOC 2 and PCI. Strong analytical and problem-solving skills, particularly when working through ambiguous, complex, or high-impact security issues. Excellent communication skills and the ability to build credibility with engineering peers through clear, direct, and pragmatic guidance. A demonstrated ability to mentor others, advocate for security best practices, and influence teams without relying solely on formal authority. Comfort working autonomously in a fast-paced, collaborative, and remote-first environment. Benefits: Base salary range of $182,800–$215,000 USD , depending on factors such as experience, expertise, and location. Equity provided to all employees. Potential eligibility for an annual bonus depending on the role. Competitive compensation designed to reflect the scope and experience required for the position. Remote work opportunities within the United States, with a flexible hybrid-hub approach depending on role and location. Benefits and perks designed to provide employees with the resources and environment needed to succeed. A high-ownership environment where experienced professionals can make meaningful, organization-wide contributions. Opportunities to work on complex security challenges while collaborating with high-caliber engineering and technology teams. Perks and benefits may vary based on employment type, location, and other applicable factors.