RemoteLeaf Logo
Log in Sign up

Senior Application Security Engineer

1 month, 3 weeks ago
United States
Full-time
Senior
Application Security Engineer
Cybersecurity
AWS Burp Suite CI/CD Docker GitHub GitHub Actions Go Helm Java JavaScript Kotlin Kubernetes Penetration Testing Python Terraform TypeScript
Apply Now
Alphasense

Alphasense

Alphasense is a global leader in providing high-quality gas sensors and air quality monitors to industrial OEMs. With over 25 years of experience, the company offers a wide range of innovative gas sensor technologies for various applications, including...

Industrial Conglomerates
51-250
Founded 1996
View All Jobs 113

Description

  • Own the code and pull-request security enforcement layer that every change passes through.
  • Operate and continuously tune the SAST, SCA, secrets-detection, and SBOM pipeline.
  • Design and harden deterministic security gates for AI-authored and human-authored code.
  • Review human-authored and agent-authored pull requests and contribute AI-generated patch proposals.
  • Own the security approach for AI-assisted development tools and workflows, including agentic systems and MCP integrations.
  • Author and roll out AI-assisted development security policy covering prompt injection, scope governance, credential handling, and audit attribution.
  • Threat model new AI features, agent gateways, MCP connector architecture, and AI workflows in the research platform.
  • Scale threat modeling and embed security acceptance criteria and verification hooks into the product design process.
  • Partner with engineering and product security teams to build practical security training and developer enablement programs.
  • Drive fast resolution of critical findings, support testing and posture programs, and lead response for application-layer incidents and integration compromises.

Requirements

  • 6+ years of engineering experience, including 4+ years in a dedicated AI Application Security or Product Security role at a SaaS or cloud-native company.
  • Hands-on, recent development experience; ability to write code and read pull requests fluently in at least two of Python, TypeScript/JavaScript, Java/Kotlin, or Go.
  • Comfort working with Terraform, Helm, and Kubernetes manifests.
  • Direct experience building, integrating, or operating agentic AI and MCP systems in production or governed engineering workflows.
  • Production operation of a SAST/SCA pipeline at scale using tools such as Snyk, Semgrep, GitHub Advanced Security, Checkmarx, Veracode, or equivalent.
  • Demonstrated ownership of a threat modeling or developer security training program.
  • Ability to think in layered, defense-in-depth security models across code, contract, behavior, simulation, and data.
  • Strong written communication skills for policy, guidance, runbooks, and PR feedback.
  • Open-source contributions to security tools, MCP servers/frameworks, agent harnesses, or threat modeling tools are preferred.
  • Experience shipping deterministic compliance gates accepted by external auditors is preferred.
  • API security and DAST experience, plus modern container/Kubernetes security, is preferred.
  • AWS security depth and exposure to AI/ML production environments are preferred.
  • Experience supporting customer-facing security posture dashboards or DDQ responses, ideally in a regulated industry, is preferred.
  • Public writing or speaking on developer security, AI/agent security, or AppSec automation is preferred.
  • Pre-IPO experience or familiarity with SOC 2 Type II, ISO 27001:2022, ISO 42001, SOX, or GDPR is preferred.
  • Certifications such as OSWE, OSCP, CSSLP, AWS Security Specialty, or CISSP are preferred.

Benefits

  • Base salary range of $157,000 to $216,000 USD.
  • Performance-based bonus eligibility.
  • Equity compensation.
  • Generous benefits program.
  • Remote-first work environment.
  • High autonomy in a senior individual contributor role.
  • Clear path to Staff / Tech Lead as the team grows.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cato Networks

DevSecOps

Cato Networks 251-1K Diversified Telecommunication Services

Cato Networks is hiring an Application Security Engineer (DevSecOps) to embed security across its cloud-based software development lifecycle and help R&D teams deliver secure applications at scale.

Israel Mid Level Application Security Engineer
Agile AWS CI/CD DevSecOps Docker Go Java Kubernetes Microservices Network Security Python Terraform
2 days, 21 hours ago
Huntress

Manager, Product Research

Huntress 251-1K Professional Services

Huntress is hiring a remote US Product Research Manager to lead cybersecurity research efforts that improve threat detection and prevention for customers.

United States Full-time Lead Application Security Engineer Product Manager
$195k-$225k
Cybersecurity
5 days, 22 hours ago
Zeta Global

Lead Application Security Engineer

Zeta Global 1K-5K Media

Zeta Global is hiring a Lead Application Security Engineer to strengthen application and platform security across its AI-powered marketing platforms through automated, AI-native security practices and cross-functional security engineering.

United States Full-time Lead Application Security Engineer
$140k-$180k
AWS Azure Burp Suite CI/CD Cybersecurity DevSecOps Django Docker FastAPI GCP JWT Kubernetes Microservices Node.js OAuth OpenID Connect React SonarQube
6 days, 21 hours ago
Anaplan

Principal Security Architect (Product Security)

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Senior Security Architecture IC to define and drive secure-by-design architecture across its enterprise planning platform and AI products.

United Kingdom Lead Application Security Engineer
Encryption Machine Learning OWASP
1 week, 2 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers