Senior Application Security Engineer
Clear Capital | CubiCasa | restb.ai · Remote - US; Reno, NV
Extracted from the posting
Validates the security of applications and their dependencies, including middle-tier systems and databases, using SAST, DAST, SCA, threat modeling, and penetration testing. Leads AI security work such as LLM threat modeling and third-party model audits, and trains developers. Requires 4+ years of experience, AWS security knowledge, and scripting in languages like Python or Java.
The Sr. Application Security Engineer is responsible for validating that application services are designed and implemented with high security standards. The role analyzes the security of applications in tandem with their underlying services, including connected dependencies such as middle-tier systems and databases. Additionally, the Sr. Application Security Engineer addresses legacy and emerging security issues, and implements repeatable secure development practices to reduce the introduction of program design flaws that may lead to exploitation. As issues are uncovered, the application security engineer communicates with the appropriate technical and leadership teams to ensure a focus on risk mitigation – allowing for business continuity, but without negligent risk. Application Security Engineers are constantly assessing applications for weaknesses and finding resolutions before they can be abused.
This position is also responsible for assessing the security of applications for business-to-business initiatives, third-party relationships, outsourced solutions and vendors. The Sr. Application Security Engineer is expected to recommend programmatic controls, and monitor and manage secure development practices to address modern day issues. Application Security Engineers think like attackers, but always act with integrity and do not abuse their privilege.
