Senior Cloud & Application Security Engineer

AXON-Networks is hiring a hands-on Senior Cloud & Application Security Engineer to strengthen the security of its cloud-native platforms. Reporting into the Information Security organization, this role partners closely with engineering and operations to improve application security, DevSecOps practices, and security testing and detection capabilities across environments, Kubernetes, and CI/CD pipelines.

What you’ll do

• Work with development teams to improve secure coding and overall application security practices.
• Review security findings from SAST, SCA, dependency scanning, container scanning, secret detection, and other security tooling.
• Help teams evaluate exploitability, exposure, severity, and the most appropriate remediation path.
• Conduct targeted manual reviews of applications, APIs, and services.
• Participate in application and architecture threat modeling activities.
• Support secure API design and input validation requirements.
• Review security-sensitive functionality including authentication, authorization, session management, cryptography, and secrets handling.
• Assist with penetration testing and validate remediation of penetration test findings.
• Integrate and improve security controls within CI/CD pipelines, including security gates and automated security testing with DevOps and Engineering teams.
• Improve source code, dependency, container, and artifact security, including work related to artifact integrity, signing, provenance, and software supply chain controls.
• Evaluate build and deployment workflows and infrastructure-as-code for security weaknesses.
• Assess Kubernetes clusters, workloads, cloud environments, and supporting infrastructure for security risks, including identity and access management configurations.
• Evaluate network security controls such as segmentation, ingress/egress, workload identities, and service-to-service access.
• Review container security topics including runtime configuration, secrets management, and image security.
• Validate cloud security baselines and support implementation and verification of security controls.
• Perform vulnerability technical analysis across AXON software, infrastructure, containers, dependencies, and services, including assessment of newly disclosed CVEs for applicability and exposure.
• Assist Information Security Analyst and Engineering teams with vulnerability triage and remediation validation.
• Differentiate theoretical scanner findings from meaningful, exploitable risk; document findings and remediation recommendations.
• Participate in design and architecture reviews to identify risks early and recommend practical technical controls.
• Review new technologies, platforms, integrations, and services for security implications, and help maintain approved security patterns and reference architectures.
• Develop repeatable security validation procedures and automation where appropriate, reproduce findings, verify fixes, and assist with building security-focused test cases.
• Support suspected security incident investigations by reviewing logs, cloud events, authentication activity, network activity, and system evidence.
• Improve security telemetry and detection capabilities, participate in incident response exercises and post-incident reviews, and provide technical guidance and mentorship to Security Champions.
• Develop security-focused technical training for Engineering and Operations teams and support the Security Champion Council, including reviewing team findings and promoting reusable secure engineering patterns.

Requirements

• 5+ years of experience in application security, cloud security, security engineering, DevSecOps, penetration testing, platform engineering, or related technical roles.
• Strong knowledge of cloud-native application architectures.
• Strong practical knowledge of Kubernetes and containers.
• Understanding of CI/CD pipelines and modern software development workflows.
• Experience with application security testing tools including SAST, SCA, container scanning, dependency scanning, and secret detection.
• Strong understanding of common application vulnerabilities and secure coding practices.
• Experience evaluating REST APIs, service-to-service communications, authentication, authorization, and secrets handling.
• Experience with at least one major public cloud platform.
• Ability to analyze vulnerabilities and determine realistic exploitability and impact.
• Ability to communicate effectively with developers and infrastructure engineers.

Technologies

• Go, Java, Python, C/C++
• GitLab Ultimate, Terraform, Helm, Kubernetes operators
• Azure, GCP, OCI
• OCI, service meshes, gRPC, message buses, microservice architectures
• OWASP ASVS, OWASP Top 10, CWE, CVSS, EPSS, KEV
• Burp Suite, Nmap, Semgrep, Trivy
• OSCP, CSSLP, CCSP, GIAC
• Kubernetes security certifications
• SAST, SCA, dependency scanning, container scanning, secret detection, CI/CD pipelines
• Kubernetes, containers, REST APIs

Location and visa sponsorship

• Primary location: Irvine, CA 92618 (onsite)
• Local candidates are intended, with remote US-based candidates considered.
• Unable to offer visa sponsorship for this role.

Salary range

USD 150,000 - 220,000 per year.